// dfs · privacy policy · v1.0

Privacy Policy

Effective: 2026-05-04 · Dark Forest Solutions LLC

1. What we collect

Contact form submissions (name, email, message). Authentication cookies (HMAC-signed session tokens for PIN-gated areas). Standard server logs (IP, user agent, request path) retained 30 days for security and debugging.

2. What we don’t do

No advertising trackers. No third-party analytics. No selling, renting, or trading customer data. No marketing emails to people who haven’t explicitly opted in.

3. How we use it

Contact-form data is used solely to respond to your inquiry. Authentication tokens are used solely to gate access to private areas. Server logs are used solely for security, debugging, and capacity planning.

4. Sub-processors

Site hosting: Vercel. Email delivery: standard SMTP via afo@darkforestsolutions.com (Google Workspace). Domain DNS: Vercel/Cloudflare. We do not use behavioral analytics, advertising networks, or session-replay tools.

5. Confidentiality of client work

Client-supplied content (reference media, briefs, business information) is treated as Confidential Information and stored only in DFS-controlled environments. Private project portals are PIN-gated and indexed-out from search engines.

6. Your rights

You can request a copy of any data we hold about you, request deletion, or correct inaccuracies. Email afo@darkforestsolutions.com; we respond within 14 days.

7. Cookies

We set one cookie: dfs_session — an HMAC-signed authentication token, used only for PIN-gated areas, expires after 30 days. No tracking cookies. No advertising cookies.

8. Contact

Privacy questions: afo@darkforestsolutions.com · 248-417-5987

Privacy Policy · Dark Forest Solutions