LEGAL

What we collect

If you ask for alerts, Reset Beacon handles your email address, chosen topics, consent, confirmation state and delivery events. The address is encrypted in the database. A keyed digest is used to find the record without exposing the address.

If you turn on browser alerts, Reset Beacon stores the browser push endpoint, its delivery keys, your chosen topics and time zone. The endpoint and keys are treated like credentials and are never returned by a public or operator API.

The site runs on the operator’s own server behind Cloudflare’s network. Cloudflare provides DNS, the tunnel, the edge cache and Turnstile. For community rate limits, the Worker changes the request IP address into a keyed, date-bound digest before saving it. The database does not store the raw IP address for that check.

Visitor reports are stored as one row per day per visitor, keyed to a daily digest that cannot be turned back into an address, and are shown only as totals. They never change the forecast or count as evidence.

How it is used

Your address is used for the four kinds of alert: a reset looks likely, is scheduled, or lands, or OpenAI hands out a banked reset. It is not used for marketing, product news, surveys or a digest.

Reset Beacon uses the stored data to send requested alerts, prevent repeat mail, limit abuse, correct mistakes and keep the service working. Sound Media does not sell personal data or use alert addresses for advertising.

How long we keep it

Unconfirmed sign-ups expire after 48 hours. Active subscription data remains while the subscription is active. Delivery records are kept only as long as needed for retries, limits and abuse review.

Turning off browser alerts here deletes that browser subscription. A delivery endpoint that its browser provider says is gone is disabled so it is not contacted again.

Community security records are deleted after 35 days. Suppression records may remain after an unsubscribe, bounce or complaint because deleting them could cause unwanted mail.

Who else sees it

Cloudflare provides network protection and Turnstile security checks. Resend receives the destination address, message and delivery data needed to send mail and report bounces or complaints.

We will disclose data if legally compelled, and will tell you unless the law forbids it.

Analytics and cookies

Two measurement tools run here. First-party analytics run on a self-hosted Plausible instance. It does not use cookies and reports grouped traffic data, not visitor profiles.

Your IP address is passed to that instance with each event so it can work out your country, region and city and count you once a day; Plausible derives those from the address and does not store the address itself.

Google Analytics 4 runs for every visitor. It records the pages you open, the page or search that sent you here, an approximate location worked out from your IP address, and the kind of device and browser you use. Your IP address is shortened before Google stores it, Google advertising features are switched off, and the data is not used to follow you across other sites or to build an advertising profile.

Google Analytics stores two cookies in your browser: _ga, and one whose name starts _ga_. Each one holds a random number that stands for this browser on this site, and each lasts up to two years.

You can switch Google Analytics off for this browser. The choice is saved on your own device, so it holds on later visits, and it never leaves your device.

Turn off Google Analytics in this browser

Google Analytics runs in this browser unless you turn it off here.

Emails contain no tracking pixel. Provider click and open tracking must stay off.

Your rights

You can ignore a confirmation message, unsubscribe with one click, or manage topics from the alerts page. You can also ask for access, correction or erasure by writing from the address used for alerts.

If you are in the UK or EU, the lawful basis for sending alerts is your consent, withdrawable at any time.

Contact

The evidence archive holds public posts and public source facts. For privacy requests, write to Sound Media through the contact form. A message sent through the form is stored with the time it arrived and a one-way hash of the sending address, and is forwarded to the operator together with the sending IP address and the coarse location (city, region, country) that Cloudflare derives from it.