Privacy Policy

Privacy-first, by design

Kytosyn builds products with a simple rule: you should control your own data. We collect as little as possible. We do not sell personal data. Where we can, we design tools so work stays on your device or under your control (local or self-serve), instead of locking value behind a data harvest.

That mindset is meant to be consistent across Kytosyn products, including DiskPrices SG and can-return, and this company site at kytosyn.com. This page explains the practice in plain language. It is written for a small technology company. It is not legal advice, and we do not claim a dedicated data protection officer.

Principles we try to follow

• Collect little. If a feature does not need personal data, we should not ask for it.
• You own and control your data. Inputs you provide for a task should remain yours. We are not building a business on reselling profiles.
• Prefer local and self-serve. Where it fits the product, processing stays on your side or behind clear, optional actions you choose.
• No selling personal data. We do not sell personal data. We do not run advertising networks on this company site.
• Transparent operations. Hosting and delivery may leave ordinary technical logs. We prefer no analytics, or only the minimum needed to keep things reliable. If that changes, we will say so here.

Who we are

References to "Kytosyn," "we," or "us" mean Kytosyn, the operator of this website and the products linked from it. Privacy questions and data requests: [email protected].

What this covers

This policy covers:

• The company website at https://kytosyn.com
• Products we operate or link from this site (for example DiskPrices SG and can-return), at a high level
• Email you send us using the addresses published here

A product may publish a short note if its practices differ in a meaningful way. Those notes sit alongside this policy.

What we collect (and what we try not to)

Company website

• This marketing site is mostly static. You do not need an account to browse it.
• The contact form opens a draft in your own email app. Message content is not stored by this site when you use that flow.
• Hosting and delivery providers (for example a CDN or host) may process standard technical logs such as IP address, user agent, and requested URLs, for security, reliability, and debugging. Retention follows those providers' defaults unless we configure otherwise.
• We do not intentionally place first-party analytics or ad-tracking cookies on this site today. Prefer none. If we ever add minimal analytics to understand outages or broken pages, we will update this section first.

Email you send us

• If you email [email protected], [email protected], or another address we publish, we receive whatever you include (name, contact details, message body). We use that to reply and to keep a normal business record of the conversation.

Products (high level)

• DiskPrices SG compares storage prices. It focuses on public or retailer-facing price information. Browsing may involve the same kinds of technical logs described above. We do not need your name or payment details simply to view listings.
• can-return helps with return-eligibility style checks. Prefer keeping control on your side: only enter what the task needs, and avoid secrets or sensitive personal data the tool does not require. Where the product can stay local or self-serve, that is the direction we aim for.
• Open-source repositories under the Kytosyn GitHub organization follow GitHub's privacy terms for activity on GitHub itself.

Why we process data (when we must)

When personal data is processed at all, it is typically to:

• Operate, secure, and fix the site and products
• Respond to messages you send
• Meet legal or accounting duties when those apply

We do not process personal data to build advertising profiles or to sell lists.

Your control: access, delete, export

You should be able to ask what personal data we hold about you, to correct it, to delete it, or (where we hold a portable copy) to export it, subject to legal exceptions and technical limits.

• Email [email protected] with the request type (access, correction, deletion, or export) and enough detail for us to find your records.
• We may need to verify that the request comes from you before we act.
• If a product keeps data mainly on your device, you already control deletion and export there. Tell us if something still sits on our side and you want it removed.

Sharing

We use service providers that help us host, deliver, or operate software (for example hosting, email, and source hosting). They process data on our behalf under their own terms. We do not sell personal data. We may disclose information if required by law or to protect rights, safety, or the integrity of our services.

Retention

We keep information only as long as needed for the purposes above, unless a longer period is required by law. Email threads and operational logs are a common example of short-to-medium business retention. When you ask us to delete personal data we hold, we will do so where we can, except for records we must keep.

Children

Our site and products are aimed at a general audience and are not directed at children. If you believe a child has provided personal data to us, contact [email protected] and we will take appropriate steps.

International visitors

We run this company site from a Singapore base of operations. Infrastructure providers may process data in other countries. If you access our services from elsewhere, your information may be processed outside your home country.

Changes

We may update this policy as products or hosting change. The "Last updated" date at the top will change when we do. Continued use after an update means you accept the revised policy.

Contact

Privacy questions and data requests: [email protected].