back

Privacy Policy

Last updated: 20 March 2026

Who We Are

This website, samuelmarks.com, is operated by Samuel Edney, based in Witney, Oxfordshire, United Kingdom.

For any questions about this policy or your personal data, please contact: [email protected]

What Data We Collect

When you create an account on sm.teamvault or use the service, we may collect and process the following data:

Email address (used as your account identifier)
Password (stored as a one-way cryptographic hash; we never store your plain-text password)
Files you upload (encrypted at rest using AES-256-CBC)
Comments you leave on files
Team membership information (which teams you belong to and your role)
Session data (stored server-side as files; a session cookie is set in your browser)

We do not use analytics, third-party tracking, or advertising on this site.

Why We Collect Data

We collect personal data solely to provide and operate the sm.teamvault service, including:

Authenticating your identity when you log in
Storing and serving files you upload
Managing team membership and collaboration features
Sending transactional emails related to your account (e.g., invitations, welcome messages)

Legal Basis for Processing

We process your data under the following legal bases as defined by the UK General Data Protection Regulation (UK GDPR):

Consent — you provide your data voluntarily when you create an account and agree to this policy
Legitimate interest — we process data as necessary to operate, maintain and secure the service

Data Storage and Security

All uploaded files are encrypted at rest using AES-256-CBC
Passwords are stored as one-way hashes using bcrypt
Application data is stored in an SQLite database on the server
The service is hosted on servers located within the European Union
Access to the server is restricted and protected by standard security measures

Third Parties

We share your data with the following third-party services only as necessary to operate the site:

Mailgun (EU region) — used to send transactional emails from [email protected]. Mailgun processes your email address solely for delivery purposes. See Mailgun's privacy policy.
Google Fonts — the Fira Code font is loaded from fonts.googleapis.com. Google may collect your IP address when serving font files. See Google's privacy policy.

We do not sell, rent, or otherwise share your personal data with any other third parties.

Cookies

This site uses a single session cookie to maintain your login state. This cookie is essential for the service to function and cannot be disabled while using sm.teamvault.

We do not use tracking cookies, advertising cookies, or any other non-essential cookies.

Data Retention

We retain your personal data for as long as your account remains active. If you request deletion of your account, we will erase your personal data, uploaded files, and associated content within a reasonable timeframe.

Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of access — you may request a copy of the personal data we hold about you
Right to rectification — you may request correction of inaccurate data
Right to erasure — you may request deletion of your account and all associated data
Right to data portability — you may request your data in a structured, machine-readable format
Right to object — you may object to the processing of your data
Right to withdraw consent — you may withdraw consent at any time by deleting your account

To exercise any of these rights, please contact [email protected].

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.