Legal

Privacy

1. Who is responsible

WardenKit is a product and brand of BRIDGER SERVICES (SMC-PRIVATE) LIMITED, which is responsible for this website at wardenkit.com. Privacy questions and requests: support@wardenkit.com.

2. This website

The canonical website at wardenkit.com is a set of static files. WardenKit adds no analytics, no tracking pixels, no advertising technology and no third-party fonts, and the canonical site has no accounts, logins or forms. WardenKit sets no cookies through this website and builds no visitor profiles. The only exception is the configured merchant-of-record checkout described in section 5, which loads only on a product page where a checkout is explicitly configured.

• WardenKit's static pages do not collect visitor personal data through forms. Where a checkout is explicitly configured, the merchant-of-record provider presents and processes its own checkout, customer and payment fields under its own privacy notice; WardenKit does not receive full card details, and no component, policy, dependency, SBOM or evaluation data is sent through checkout.
• We do not sell or share personal data; WardenKit collects none through these pages.
• The site is served by Cloudflare, which necessarily processes standard technical request data — such as IP address, user agent, requested URL, referrer and timestamp — to deliver pages and to protect the service against abuse, under its own terms as our hosting and network provider. WardenKit adds no tracking of its own to that data and does not use it to identify or profile visitors.
• As hosting, network and security provider, Cloudflare may also apply strictly operational or protective functionality to pages it serves — for example email-address protection, which rewrites published contact addresses and adds a small script to restore them — and it may change such functionality over time. WardenKit does not use any of it for advertising, analytics or visitor profiling.
• The only personal data WardenKit itself receives through this website is what you choose to send us by email.

3. If you email us

When you contact support@wardenkit.com or security@wardenkit.com, we receive your email address, your message and anything you attach. Our mailboxes are hosted by Fastmail, which processes and stores that correspondence for us as our email provider. We use it only to answer you and to keep a record of the correspondence, we do not use it for marketing, and we ask you not to send credentials, activation keys or customer data. You can ask us what correspondence we hold, or ask us to delete it, by writing to the same address.

4. WardenKit software

Each WardenKit product publishes its own topology and data boundary on its own product and documentation pages — what it processes, where that processing runs and what, if anything, it transmits. Those per-product statements are the authoritative description of how a given SDK handles data, and this notice is updated before any product that transmits data to WardenKit is offered.

• WardenKit's design default is local execution: where a requirement can be evaluated from data you already hold, it runs inside your process and nothing is transmitted to WardenKit.
• Where a product uses activation, it is an out-of-band step you run deliberately; it exchanges an activation credential for signed entitlement artefacts and does not send your business data.
• Any hosted component is disclosed on the relevant product page before that product is offered, together with what it records and what it does not retain.

5. Purchases

Where a released WardenKit product offers checkout, the merchant-of-record checkout is provided by Paddle on that product page, and Paddle's script loads on that product page only. The checkout runs as an overlay operated by Paddle: payment, billing and customer fields are entered into and handled by Paddle under its own privacy notice presented at checkout, and WardenKit never receives your full card details. WardenKit receives only the details it needs to fulfil the purchase and provide support — such as the buyer's name, email address, organisation, the product and plan purchased, and the transaction reference.

The only data the WardenKit page itself passes into a checkout is the internal legal revision identifier for the Terms & Conditions you accepted. The Refund Policy forms part of those Terms by reference. No component records, policies, dependency names, SBOM material or evaluation results are ever sent through a checkout, and no analytics or tracking is added around it.

6. Applicable law

This notice is issued by BRIDGER SERVICES (SMC-PRIVATE) LIMITED and, as between us, is read under the laws of Pakistan. It does not limit any privacy or data-protection right that applicable law grants you and that cannot be waived. It describes this website and the current software behaviour; it does not replace the data terms of any WardenKit package licence or subscription.

7. Changes

We will update this notice if the website or the software changes what is processed. The notice published on this page is the current Privacy notice.