This notice explains what personal information the Sessionwright website at sessionright.com collects, why, and what you can do about it. It covers the website only. It does not cover the Sessionwright product that customers run in their own environments, which is governed by the customer agreement and data processing agreement [to be drafted].
1. Who is responsible
The controller of personal information collected through this website is [LEGAL ENTITY NAME, to be formed] (“we”, “us”). Contact: hello@sessionwright.com. Postal address: [REGISTERED ADDRESS]. [EU and UK representative, if required: NAME AND ADDRESS.]
2. The short version
- No analytics, advertising pixels or tracking cookies are used at launch.
- Your theme choice (light or dark) is stored in your own browser and is never sent to us.
- If you use the contact form, we receive what you type into it and use it to reply to you.
- The NetScaler® Build & CVE Checker runs entirely in your browser. The build you check is not sent to us.
- The Sessionwright runner runs in the customer’s own environment. In the current version, no customer environment data reaches us.
3. What we collect and how
3.1 The contact form
When you submit the contact form, your browser sends these fields to our server:
- name, work email and company;
- platform (for example Citrix®, NetScaler or Azure Virtual Desktop) and the number of users in scope;
- what you are interested in (the intent) and your optional message;
- the page you submitted from, how long the form was open, and a hidden field that people never see. We use the last two only to filter out automated spam.
We add the time of the request and a note of whether your email address uses a free webmail domain. Your IP address is used briefly, in the server’s temporary memory, to limit repeated submissions. It is not stored with your request.
Our server then sends the request to one or more of these destinations, depending on configuration:
- a webhook that forwards it to [WEBHOOK DESTINATION, for example our CRM or email tool], if configured;
- a database hosted by Supabase, if configured;
- otherwise, or if those destinations fail, the server log of our hosting provider, Vercel, so the request is not lost.
Please do not put passwords, credentials or configuration files in the form.
3.2 Theme preference
If you switch between light and dark mode, the choice is saved in your browser’s local storage (key sw-theme, value light or dark). It stays on your device, it is not a cookie, and it is never sent to us. You can clear it in your browser settings at any time.
3.3 Analytics and cookies
At launch the website uses no analytics, no advertising or tracking cookies, and no third-party tracking scripts. Fonts are served from our own domain, so your browser does not contact a font provider. If we add analytics later, we will update this notice first [and ask for consent where the law requires it].
3.4 Hosting logs
Like any web host, our hosting provider, Vercel, processes technical request data such as IP address, browser type, the page requested and the time, to deliver and protect the website. [Retention of these logs: confirm against the Vercel plan in use.]
3.5 The NetScaler Build & CVE Checker
The checker runs entirely in your browser. The build string or command output you paste is processed on your device and is not sent to us. The checker never connects to your appliances.
3.6 The Sessionwright product
The product’s runner is installed in the customer’s own environment. In the current version, no customer environment data (for example usernames, host names or session data) reaches us. Any processing we do for customers in future versions will be covered by a data processing agreement [to be drafted].
4. Why we use it
- To reply to your request and arrange the call or assessment you asked about.
- For sales follow-up about what you asked for.
- To keep the form free of spam and abuse.
We do not sell your personal information, share it for cross-context behavioral advertising, or add you to a marketing list without your consent. [Legal bases under the GDPR and UK GDPR, for example legitimate interests (Article 6(1)(f)) and steps taken at your request before a contract (Article 6(1)(b)): counsel to confirm.]
5. Who we share it with
We share personal information only with service providers that help us run the website and reply to you:
- Vercel (hosting);
- Supabase (database), if configured;
- [WEBHOOK DESTINATION PROVIDER], if configured;
- [EMAIL PROVIDER used to reply from hello@sessionwright.com].
We may also disclose information if the law requires it. [International transfers: where these providers process data outside your country, we rely on SAFEGUARD, for example the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. Counsel to confirm.]
6. How long we keep it
Contact requests: [RETENTION PERIOD, for example 24 months after our last contact with you, unless you become a customer]. Hosting logs: [per the hosting provider’s retention]. You can ask us to delete your request sooner (see section 7).
7. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you;
- correct it;
- have it deleted;
- object to or restrict how we use it;
- receive it in a portable format;
- withdraw consent where we rely on consent;
- complain to your data protection authority.
To use any of these rights, email hello@sessionwright.com. We will respond within [30 days, or the period the applicable law sets]. We will not treat you differently for using your rights. [US state privacy rights, for example under the CCPA: counsel to confirm wording.]
8. Security
The website is served only over HTTPS. Access to contact requests is limited to [the people who need them to reply]. [Describe further measures once the storage destination is final.]
9. Children
This website is meant for IT professionals. It is not directed at children, and we do not knowingly collect their information.
10. Changes to this notice
We will update this page when our practices change and show the date of the change at the top. [Describe how material changes are announced.]
11. Contact
[LEGAL ENTITY NAME, to be formed], [REGISTERED ADDRESS]. Email: hello@sessionwright.com.