Privacy notice

Effective 2026-08-07 · Shinrasec, operated by Martin Mielke

Data we process

• Your Shinra ID subject and verified email address.
• The commercial customer identifier and access state supplied by Control.
• Download records containing an opaque customer ID, download ID, tool name, artifact digest, and issue time.
• Security and request logs needed to protect and troubleshoot Kura.
• Support messages and files you choose to provide.

Why we process it

We use this data to authenticate you, enforce licensed access, issue attributable downloads, investigate unauthorized redistribution, secure the service, provide support, and meet legal obligations. We do not sell personal information.

Watermark data

The executable marker contains an opaque customer identifier rather than your email address. Kura retains the mapping needed to identify which licensed customer received a marked copy. Anyone who obtains the executable can inspect the opaque marker fields.

Sharing and retention

Data may be handled by providers that host, authenticate, secure, or support Kura, and disclosed when legally required or necessary to protect users, the service, or others. Access and download records are retained for the period needed to administer the agreement, investigate misuse, resolve disputes, and meet legal obligations.

Security

We use verified OIDC login, random HTTP-only session tokens stored only as hashes, encrypted transport, least-privilege service accounts, private administrative credentials, and signed download markers.

Your choices

Depending on applicable law, you may request access, correction, deletion, restriction, or export of personal data, or object to certain processing. Send privacy requests to martin@shinrasec.com. Some download records may need to be retained for contractual, security, or legal claims.