Privacy policy

Effective date: 2026-07-15

This policy covers personal data processed by MANTIKA ("we", "us") as the operator of Tessera: the public website at www.staging.tessera.zone, this documentation site, the console, and the platform APIs. It states what we actually collect and why — nothing more is collected than is described here.

The marketing site stores nothing client-side today

The public website (www.staging.tessera.zone) sets no cookies and stores nothing in your browser. It loads no third-party fonts, scripts, trackers, or ad technology of any kind — every asset is served first-party, and the only runtime requests it makes are to our own platform (the public status feed).

Like effectively all web infrastructure, our load balancers keep standard request logs (IP address, user agent, requested URL, timestamp) used solely for security and operations, retained on our infrastructure provider per the security & data handling page.

The contact form

The "Contact us" form at www.staging.tessera.zone/contact is the marketing site's only intentional collection of personal data. It collects: name, work email, company, an event-volume range, and an optional message.

• Why: solely to respond to your request and run the pilot you asked for. This is not a mailing-list signup; we do not add you to marketing lists.
• How it is processed: first-party only — submissions are delivered by our own service to a founder-monitored inbox. No third-party form service receives your submission. The subprocessors page remains the authoritative list of the third parties that process data on our behalf (our cloud infrastructure provider, and — for email delivery — any provider listed there).
• Retention: stored submissions are kept for up to 12 months after the request is resolved, then deleted. Email us to have a submission deleted sooner.
• Spam controls: the form uses a honeypot field and per-IP rate limiting; these inspect only the submission itself.

First-party analytics (planned, disclosed here from the start)

We are building first-party funnel analytics for the public website and console — no third-party analytics or trackers, ever. When enabled, it works like this:

• The site stores a randomly generated visitor identifier (a visitor_id) with first-touch attribution (which page you landed on, and from where) in your browser's localStorage. It contains no personal details and is not shared with, or readable by, any third party.
• We honor privacy signals: when your browser sends Global Privacy Control (GPC) or Do Not Track (DNT), no visitor identifier is stored and analytics events are not attributed to you.
• If you submit the contact form, the resulting internal funnel event carries only identifiers and coarse categories (such as the event-volume range) — never the contents of the form.
• These analytics measure our own funnel (visits, signups, activation) on our own infrastructure; the data is not sold or shared.

Until this is enabled, the site stores nothing in your browser at all.

Console and platform

• Account data: name, email, and authentication identifiers for console users, processed to operate your account (authentication is provided by our cloud infrastructure provider — see subprocessors).
• Customer event data: the events, entities, and attributes you send to Tessera are your data, processed only on your instructions to provide the service. You are the controller of that data; if it contains personal data of your users, our terms and (for enterprise customers) your agreement with us govern that processing. Deletion works as documented in data deletion.
• Billing data: paid plans use Stripe for payment processing; we never see full card numbers.

Your rights

Email hello@mantika.ca to access, correct, or delete personal data we hold about you, or to ask anything about this policy. We respond to every request.

Changes to this policy

Material changes are announced in the changelog before they take effect, and this page always carries the current effective date.