Privacy / Public website
Your inquiry information, explained.
This notice covers stonesignallabs.com, not the separate authenticated RookHaven Portal. Updated September 15, 2026.
What you choose to send.
You can browse without an account. The contact form collects your name, reply email, topic, and any context you provide. Organization is required for business inquiries and optional for privacy requests and security reports.
We use this information to evaluate and respond to your request. Do not include passwords, credentials, client data, or sensitive technical evidence. We do not sell public-site inquiry information or use it for cross-site advertising.
Where the information goes.
| Information | Purpose and handling | Retention boundary |
|---|---|---|
| Inquiry message | Resend delivers the submitted message to the designated Stone Signal Labs mailbox. Routine application logs exclude form contents. | The mailbox is separate from the short-lived delivery record. Its messages are subject to mailbox retention, access controls, legal obligations, and deletion procedures; no fixed mailbox deletion interval is stated here. |
| Verification | Cloudflare Turnstile processes verification and limited request metadata to help prevent abuse. | Provider processing is governed by the applicable service terms; do not treat the delivery-ledger period as a provider-wide retention period. |
| Delivery record | An opaque reference, integrity values, timestamps, and delivery state prevent duplicate sends. It contains no name, email, organization, request text, verification token, or IP address. | Live records expire after about 26 hours. Encrypted recovery backups may retain those opaque records for up to 35 days. |
| Browser recovery | A first-party HttpOnly recovery cookie and an opaque local browser reference support delivery-status checks. | The recovery cookie is short-lived. An unresolved reference may remain in browser storage to prevent accidental resubmission; it contains no inquiry text. |
| Operational logs | Application infrastructure records operational events; routine logs exclude inquiry contents. | The briefing Lambda log retention is 30 days. This does not set mailbox or verification-provider retention. |
Expiry of a delivery record does not delete the delivered email. Contact us if you need the treatment of a particular inquiry explained.
Privacy-respecting measurement.
The site uses a small set of aggregate conversion signals with a fixed event name. The measurement payload does not contain contact information, page content, a persistent visitor identifier, or fingerprinting data. No measurement signal is sent when the browser exposes Do Not Track or Global Privacy Control.
A session flag limits repeat signals in the same tab. Ordinary network requests still require infrastructure processing; the absence of a tracking identifier should not be read as a claim that no network metadata exists.
The website does not use third-party advertising analytics. Cloudflare Turnstile and Resend handle verification and message delivery under their respective terms.
Ask about your information.
The optional rewards journal stores progress totals and achievement snapshots in this browser. Syncing is an explicit visit to each game; no account credentials, full saves, or answers are transferred. You can remove each snapshot on the rewards page without changing game progress. Snapshots are not a shared account or a certification.
Email info@stonesignallabs.com to request access, correction, or deletion of public-site inquiry information, or to ask about retention. We respond within 24 hours; completing a request may require identity verification or consideration of applicable legal and security-retention obligations.
You may also use the privacy-request topic in the form. An organization or business-domain email is not required. Send only enough information to identify the inquiry; do not send identity documents or secrets in the initial message.
Open privacy request form