What this site collects.

No tracking, no cookies

This website sets no cookies, runs no analytics in your browser, and loads nothing from a third party. The fonts and images are served from this domain. There is no cookie banner because there is nothing to consent to.

Reading these pages is not recorded. The web server keeps no access log, so which pages you looked at, and for how long, is not something we know or could find out.

The support site for customers is a separate site. It needs an account and sets one cookie when you sign in. What it keeps is described further down.

If you request a demo

The demo form sends what you type to Acuity by email: your name, company, work email, and any optional role, size, timeframe and message.

Two things reach a technical log rather than the mailbox. When the form scrolls into view, your browser asks our server for a short-lived token that proves a later submission came from the form and not from a script. That request is recorded with the time and whether it worked, but without your IP address: the logging service discards it before storing the record.

If you go on to submit, one line is written recording that a message was delivered, the domain part of your email address (never the address itself), the sending IP address, and which anti-abuse checks the submission passed. A submission stopped as abuse is recorded the same way, with the reason.

That log exists to catch abuse and to tell us the form is working. It is not used to build a profile of you, and it is not connected to anything you do elsewhere on the site.

At the same moment your browser also solves a small puzzle, a fraction of a second of arithmetic, which makes sending the form thousands of times expensive for a script while costing you nothing you would notice. It runs entirely in your browser, sends us no information about your device, and is not mining anything.

Your message itself is used for one thing: to arrange and follow up your demo. It is not shared with anyone, not sold, not added to a newsletter, and not fed into any advertising system.

Where it is kept

Your message is delivered to our Microsoft 365 mailbox in the EU and kept there for as long as it is relevant to our correspondence with you. No separate marketing or CRM system receives it.

The technical log is held in Switzerland, on Microsoft Azure in the Switzerland North region. It is deleted automatically after 90 days; nobody has to remember to clear it.

Having it removed

Write to info@postquantumleap.com and ask. We will delete your request and confirm that we have. You can also ask what we hold, and we will tell you.

If you have an account on the support site

Customers read the documentation and download the deployment files at support.postquantumleap.com. That site is for known users only, so it keeps more than this one does.

An account holds your name, your work email address, your organisation and your role. There are no passwords. You sign in with a link sent to your address, or with a passkey. Of a passkey we store the public half and the name you gave it. The private half never leaves your device.

The support site sets one cookie. It holds a random value that says you are signed in, and nothing else. Scripts cannot read it, and it is sent to the support site only. It ends when you sign out, and 30 days after your last visit. This website still sets none.

Three kinds of record are kept: each sign-in, each change to who has access, and each download of a file. A record holds the time, your name and organisation, and what happened. A sign-in also notes the browser and the operating system, so that you can recognise your own sessions on the account page. These records hold no IP address. They are deleted after 12 months.

If you ask for access with the request form, we keep your name, your work email address, your organisation and the licence ID if you gave one. A request that you do not confirm from your mailbox is deleted after a day. A request that was decided is deleted after 30 days. An approved one has become your account by then.

Emails from the support site come from support@postquantumleap.com: sign-in links, invitations and, if you want it, one message for each release. You can switch the release message off on the account page.

Accounts and records are held in Switzerland, on Microsoft Azure in the Switzerland North region. A nightly copy is kept for 35 days. The emails are sent through our Microsoft 365 in the EU.

To have your account removed, write to info@postquantumleap.com. We delete the account with its passkeys and sessions and confirm that we have. The records of what the account did stay until they are 12 months old.

Who to ask

Acuity, Switzerland. info@postquantumleap.com.