Last updated: March 2026
We keep what we need to run CarbTrust, and no more. We don't sell your data. If you contact us, we hold on to that thread for as long as it's useful. This page walks through the details.
When you use the site. Standard technical details your browser sends — IP address, browser and OS, pages viewed, the page you came from, and download activity. This is what any web server sees.
When you contact us. Whatever you put in the message — your name, email, and the details of your request.
When you use the app. Usage patterns and events tied to security, e.g. failed sign-ins or suspicious activity.
We use the information to:
We process it based on your consent (when you volunteer it), because we need to in order to provide the service, or to protect the platform.
We don't sell or rent your data. We share it only with the providers we need to run the service — hosting, analytics, security tooling, technical support. Those providers are expected to handle it responsibly.
We take reasonable steps to protect what we hold, but no internet service can promise perfect security. If we ever find out that your data was exposed, we'll do the right thing.
We use cookies to remember preferences, keep the site working smoothly, and defend against abuse. You can turn cookies off in your browser — some things may stop working.
Only for as long as we need it — to run the service, meet legal obligations, or resolve disputes. When we don't need it any more, we delete or anonymise it.
Depending on where you live, you may be able to:
Email us if you want to do any of these — details below.
CarbTrust
Email: [email protected]