Privacy Policy

Last updated: January 2026

1Introduction

Graphene Security ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website and purchase our GrapheneOS-flashed devices.

We are a privacy-focused company that specializes in providing secure, privacy-enhancing smartphones. Our business model is built on privacy, and we take extreme measures to ensure your data remains secure.

2Information We Collect

Personal Information

  • Name and contact information (email, phone)
  • Shipping and billing addresses
  • Payment information (processed securely through third-party payment processors)
  • Account credentials (encrypted and salted)

Order Information

  • Product selections and customization options
  • Order history and transaction records
  • Order confirmation with payment details
  • Customer service communications

Technical Information

  • IP address and browser type
  • Device information and operating system
  • Pages viewed and time spent on pages
  • Referring website information

3How We Use Your Information

We use your personal information for the following purposes:

  • Order Processing: To process and fulfill your orders, including payment processing and shipping
  • Communication: To respond to your inquiries, provide support, and send order updates
  • Security: To detect, prevent, and address technical issues and fraudulent activity
  • Improvement: To analyze usage patterns and improve our products and services
  • Legal Compliance: To comply with legal obligations and enforce our terms

4Data Protection & Security

We implement industry-leading security measures to protect your information:

  • End-to-End Encryption: All data transmitted is encrypted using TLS 1.3
  • Secure Storage: Data is encrypted at rest using AES-256 encryption
  • Minimal Data Collection: We only collect data essential to our operations
  • No Third-Party Tracking: We do not sell your data to third parties
  • Regular Audits: Security audits are conducted regularly

Your privacy is our core business. We don't profit from your personal data.

5Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

  • Service Providers: Trusted third parties who assist in operating our business (payment processors, shipping carriers)
  • Legal Requirements: When required by law, court order, or government authorities
  • Business Transfer: In connection with a merger, acquisition, or sale of assets
  • Protection of Rights: To protect our rights, property, or safety and that of our users

6Your Privacy Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal data
  • Objection: Object to processing of your personal data
  • Portability: Receive your data in a structured format
  • Restriction: Request limitation of data processing

To exercise these rights, please contact us at contact@graphene-security.com or visit your account privacy settings.

7Cookies & Tracking

We use minimal cookies and tracking technologies essential for site functionality:

  • Essential Cookies: Required for site functionality (shopping cart, authentication)
  • Security Cookies: For fraud detection and prevention. We use device fingerprinting (IP address, browser characteristics) to identify suspicious activity patterns. These cookies are HTTP-only, valid for 30 days, and used solely for security purposes.

We do NOT use tracking pixels, fingerprinting, or third-party analytics for advertising purposes.

8Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

10Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: