Privacy Policy
Shark Skin Security exists to protect people. That principle extends to your own information. This policy explains what we collect, why, and the choices you have.
Who we are
Shark Skin Security ("Shark Skin," "we," "us") provides corporate-grade cyber security services to individuals and families. This policy covers our website, assessment, and member area at sharkskinsecurity.com. You can reach us any time at hello@thesharkskin.com.
Information we collect
- Account information — your name and email address when you create an account or sign in, including via Google. When you use "Continue with Google," we receive your basic Google profile (name, email address, and profile picture) — never your Google password.
- Assessment responses — the answers you provide in our security assessment, which we use to generate your results. The assessment does not ask for passwords or account credentials.
- Membership & shipping details — for members, your household size and the shipping address you provide so we can send your kit.
- Payment information — handled by our payment processor, Stripe. We do not see or store your full card number; we retain only limited billing details (such as your name, billing address, and subscription status).
- Communications — messages you send us and our correspondence with you.
- Technical data — basic, standard information your browser sends (such as IP address and device/browser type) and essential cookies needed to keep you signed in.
How we use your information
- To create and secure your account and keep you signed in.
- To provide our services — your assessment results, your member dashboard, and (for members) fulfilment of your kit.
- To process payments and manage your subscription.
- To respond to you and provide support.
- To send service and account emails (for example, sign-in confirmation and password resets). We send marketing email only where permitted, and you can opt out at any time.
- To protect the security and integrity of our services and to meet legal obligations.
How we share information
We do not sell your personal information. We share it only with service providers that help us run Shark Skin, under agreements that limit their use of it:
- Supabase — account authentication and secure data storage.
- Stripe — payment processing and subscription billing.
- Google — optional sign-in, if you choose "Continue with Google."
- Resend — delivery of service and account emails.
- Vercel — website hosting.
We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer.
Data retention
We keep your information for as long as your account is active or as needed to provide our services, and thereafter only as required for legitimate business or legal purposes. You may ask us to delete your account and associated data at any time.
Security
Protecting information is our profession. We use industry-standard safeguards — including encryption in transit, hashed passwords managed by our authentication provider, and access controls on member data. No system is perfectly secure, but we work continuously to protect yours.
Your choices and rights
- Access, correct, or delete your personal information.
- Opt out of marketing emails via the unsubscribe link or by contacting us.
- Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to a copy of your data or to object to certain processing.
To exercise any of these, email hello@thesharkskin.com.
Children
Our services are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will remove it.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, take reasonable steps to notify you.
Contact us
Questions about your privacy? Email hello@thesharkskin.com. We read every message.