Privacy Notice

Last updated: February 2026 · Effective: February 2026

⚠ INDEPENDENCE NOTICE — Kulprit Studios LLC is an independent private entity and is not affiliated with, endorsed by, any other organization. All platforms and content represent solely the work of Kulprit Studios LLC.

1. Who We Are

Kulprit Studios LLC ("we", "us", "our") operates kulpritstudios.com and all associated subdomains including pasta.kulpritstudios.com, sabr.kulpritstudios.com, weather.kulpritstudios.com, venscore.kulpritstudios.com, krucible.kulpritstudios.com, soctriage.kulpritstudios.com, trustlab.kulpritstudios.com, seclab.kulpritstudios.com, security.kulpritstudios.com, sneakers.kulpritstudios.com, games.kulpritstudios.com, and proto.kulpritstudios.com.

Contact: privacy@kulpritstudios.com

2. What Data We Collect

We collect minimal data necessary to operate our platforms:

Usage data: Server access logs including IP address, browser type, pages visited, and timestamps. Logs are retained for 30 days and used solely for security monitoring and performance analysis.
Input data: Content you enter into interactive tools (threat models, tabletop scenarios, vendor assessments). This data is processed in your browser session and is not stored server-side unless explicitly stated.
Technical data: Standard HTTP headers, referrer information, and anonymized analytics where applicable.

We do not collect names, email addresses, payment information, or account credentials unless you explicitly contact us.

3. How We Use Your Data

Operate and maintain the platforms
Monitor for security threats and abuse
Diagnose and fix technical issues
Improve platform functionality

We do not sell, rent, or share your data with third parties for marketing purposes.

4. AI-Powered Tools

Some platforms on this domain use AI language models to process user-submitted content. Content submitted to AI-powered tools may be transmitted to third-party AI providers for processing. We do not use submitted content to train AI models. Do not submit personally identifiable information, classified data, or sensitive organizational information to these tools.

5. Third-Party Services

Our platforms may load resources from the following third-party services:

Google Fonts — for typography (subject to Google's privacy policy)
Cloudflare CDN — for content delivery and DDoS protection
MLB Stats API — for baseball statistics data (SABR//LAB only)

6. Cookies & Local Storage

We do not use tracking cookies. Some platforms use browser local storage to preserve your session state (e.g., scenario progress in tabletop tools). This data remains on your device and is not transmitted to us.

7. Your Rights (GDPR / CCPA)

You have the right to request access to, correction of, or deletion of any personal data we hold about you. To exercise these rights, contact privacy@kulpritstudios.com. We will respond within 30 days.

California residents may exercise rights under the CCPA including the right to know, right to delete, and right to opt-out of sale (we do not sell personal information).

8. Data Retention

Server access logs: 30 days. Session data: browser session only. Contact inquiries: 12 months. We do not maintain persistent user profiles.

9. Security

We implement industry-standard security measures including TLS encryption, security headers, and access controls. For our responsible disclosure policy, see security.kulpritstudios.com/responsible-disclosure.

10. Changes to This Notice

We may update this notice periodically. The "last updated" date at the top reflects the most recent revision. Continued use of our platforms after changes constitutes acceptance of the updated notice.

11. Contact

Privacy inquiries: privacy@kulpritstudios.com
Security reports: security@kulpritstudios.com
Legal inquiries: legal@kulpritstudios.com