Privacy Policy

This policy describes how TFTSR (“we,” “us”) handles personal information across our public-facing properties: this site (tftsr.com), the TRCAA product site and account system (trcaa.tftsr.com), our blog (blog.tftsr.com), and our customer support ticketing system (support.tftsr.com). It does not cover TFTSR's internal staff systems (e.g. internal email and directory services), which are not customer-facing and hold no customer data.

Contact form (tftsr.com/contact). Name, email address, optional company name, and your message. This is relayed to us by email only — it is not written to a database or retained anywhere beyond the receiving mailbox.

TRCAA accounts (trcaa.tftsr.com). If you create a TRCAA account, we store your name, email address, and profile image (as provided through sign-in) to operate your account and session.

Support tickets (support.tftsr.com). If you open a support ticket, we store your login identity (email/username) and the content of your tickets in our support system, accessible only to TFTSR support staff.

Blog (blog.tftsr.com). Our blog is public and read-only — there are no reader accounts, comments, or newsletter signups. Editor accounts are internal TFTSR staff only.

Each subdomain that requires sign-in (trcaa.tftsr.com, support.tftsr.com) sets its own session cookie, scoped only to that subdomain, used solely to keep you signed in. No cookie is shared or tracked across subdomains, and none of our sites use third-party analytics, advertising, or tracking scripts of any kind.

We use the information above to respond to inquiries, operate your account and product functionality, and provide customer support. We do not use it for advertising, and we do not build marketing profiles.

We do not sell personal information. It is shared only with the infrastructure needed to deliver our services: our outbound email relay provider, used to deliver contact-form and account-related email, and our TLS certificate authority, used to secure connections to our sites. We do not share data with advertising or analytics vendors, because we don't use any.

All TFTSR sites are served over TLS 1.2/1.3 with HTTP Strict Transport Security enforced. Application secrets and credentials are managed through HashiCorp Vault and are never hardcoded into application code or configuration. Mail transport between our systems enforces encrypted connections.

Contact form messages are not stored by us beyond whatever retention applies to the receiving mailbox. Account data is retained while your account remains active. Support tickets are retained as long as reasonably needed for support and service -quality purposes.

You may request access to, correction of, or deletion of your personal information by emailing support@tftsr.com. We will respond within a reasonable time.

Our sites are not directed at children, and we do not knowingly collect information from children under 13.

We may update this policy as our services evolve. Material changes will be reflected by updating the effective date above.

Questions about this policy can be sent to support@tftsr.com.