This notice explains how the tavkey.com website and the mailing list handle your data. The TavKey mobile app is covered separately - and collects no personal information, only optional anonymous diagnostics you can turn off - in our app Privacy Policy.
Who we are
TavKey (“we”, “us”) is developed and operated by Yaron Shemesh, who is the operator of the tavkey.com website and the data controller for the mailing list. You can reach us any time at [email protected].
What we collect
- Your email address - only if you choose to join the TavKey mailing list by entering it in the sign-up form.
- Anti-bot signals - the form is protected by an anti-bot service, which processes your IP address and basic browser signals to tell humans from bots. We use it solely to keep the form from being abused.
- Standard server logs - like any website, our hosting provider keeps short-lived request logs (such as IP address and request time) to serve the site and protect it against abuse.
We do not use advertising or cross-site tracking cookies (our providers may set functional cookies only to block bots and keep the site secure), and we do not build any profile of you. Our hosting provider provides aggregate, privacy-preserving traffic statistics derived from server logs, which contain no profile of you. If you never submit the form, we never collect your email.
How we use it, and our legal basis
- Your email - to send you one confirmation that you're on the list, and after that occasional news about TavKey: new features and important updates. We send ourselves one internal notification per new sign-up. Legal basis: your consent, given when you submit the form.
- Anti-bot signals and server logs - to keep the site secure and prevent abuse of the sign-up form. Legal basis: our legitimate interest in protecting the service.
We will not use your email for anything else, and we will not sell or rent it. "Rarely, and no spam" - as promised on the sign-up form, and every email carries an unsubscribe link.
Who processes your data
We keep the list of service providers small, and we only share what each one needs to do its job:
- Cloudflare (our hosting & security provider) - hosts the website, stores the mailing-list record, runs the anti-bot check (Cloudflare Turnstile), and keeps standard request logs.
- Resend (our email delivery provider) - delivers the confirmation email to you and the internal notification to us.
These providers act on our instructions and are not permitted to use your data for their own purposes.
Data retention
We keep your mailing-list record (your email, the sign-up date, and your subscription status) until you unsubscribe. When you unsubscribe, we mark the record as unsubscribed so we don't email you again. Server logs and anti-bot data are short-lived and handled under our providers' standard retention.
Your rights
Privacy laws such as the GDPR (Europe) and the CCPA (California) give you rights over your personal data, including the right to access, correct, or delete it, and to withdraw consent.
- Unsubscribe any time - every email we send includes a one-click unsubscribe link. Following it removes you from the mailing list.
- Access, correction, or deletion - email us at [email protected] and we'll action your request.
We will never charge you or make it difficult to exercise these rights.
International data transfers
Our service providers operate global infrastructure, so your data may be processed on servers outside your country, including in the United States (for example, Resend, our email delivery provider, is a US company). Where required, these transfers are covered by appropriate safeguards (such as the providers' standard data-protection terms, which include the EU Standard Contractual Clauses).
Children's privacy
The mailing list is intended for adults. We do not knowingly collect personal data from children. If you believe a child has signed up, email us and we'll remove the record.
Changes to this notice
If we change how the website or mailing list handles data, we will update this page and the "Last updated" date above. Material changes will be highlighted here so you can see what changed.
July 2026: named our service providers (Cloudflare, Resend) and the operator of TavKey; no change to what we collect or how we use it.
Contact
Questions about this notice? We're happy to answer.
Email: [email protected]