What OSDP Tools collects, why, and what you can do about it.
Last updated:
OSDP Tools (www.osdptools.com) is run by Cypress Integration Solutions (“Cypress”, “we”, “us”). This policy covers this site only. Other Cypress websites have their own policies.
You can reach us at solutions@cypressintegration.com or (810) 245-2300.
| Information | Why we use it | How long we keep it |
|---|---|---|
| Account details from Google: your email address, your name, a link to your profile picture, and Google’s identifier for your account. Also the display name you choose on your profile page, if you set one | To recognise you when you sign in, show who is signed in, and decide what you can use. | While your account exists, or until you ask us to delete it. |
| Your role (user, beta tester or admin), which tools you may use where an admin has changed that from your role’s default, and the dates of your first and most recent sign-in | To control who can use the tools that are in private beta. | While your account exists, or until you ask us to delete it. |
| A sign-in session: a random identifier (we store only a one-way scrambled version of it), your account ID, and when it expires | To keep you signed in as you move between pages. | At most 7 days, then it stops working and is removed automatically. It ends sooner if you sign out. |
| A record of role changes, changes to which tools someone may use, and account deletions: what happened, who did it, who it was for, the old role, the new role (for a role change) or the tools added or removed (for a tools change), and when. It uses internal IDs, not names or email addresses | To keep a security record of who has been given access, and of accounts that were removed. | Kept as a security record. When an account is deleted, the record keeps only an internal ID that no longer points to anyone. |
| Files and captured data you use with the tools | Only to decode them and send the results back to you. See “Using the tools” below. | We do not keep them. |
| Standard server records: your IP address, browser type, the address requested, and the time | To run the service and keep it secure. Our hosting provider creates these automatically. | For as long as the hosting provider keeps its standard logs. |
| Messages you send us by email or phone | To reply to you and to keep a record of what was asked. | For as long as we need to answer and follow up. |
When you open a saved trace or send captured data to a tool, it travels securely (HTTPS) to our servers, is decoded, and the results are sent back to you. We do not save the file or its contents, and we do not write them to our logs. The results you see are not stored on our servers. If you export a trace, the file is created in your browser and saved to your own device.
Captures can contain sensitive information, such as card data, keypad entries or encryption keys. Only use data you are allowed to use, and remove sensitive details before you share a trace with anyone.
This site sets only the two cookies below. Both are needed for the site to work, so they do not need your consent.
| Name | What it is for | How long it lasts |
|---|---|---|
__session |
Keeps you signed in, and carries a short-lived record while you are signing in with Google. Scripts on the page cannot read it. | Up to 7 days (10 minutes while signing in), or until you sign out. |
osdp_consent |
Remembers the choice you made in the cookie banner. | About 6 months. |
Browser storage, not a cookie. On the pages for our tools, your browser also keeps a small note called osdp_access. It records the name of a tool you have access to (for example “trace”), so the page can open straight into the tool instead of showing the sign-in layout first. It stays in your browser, it is never sent to us, and it is removed when you sign out. Our servers still check your access on every request.
Browser storage, not a cookie. While you are signed in, your browser also keeps a note called osdp_account on every page of this site. It holds the two letters of your initials (for example “CB”), so the round account button in the page header is drawn at once as you move between pages, instead of flickering while the page finds out who you are. It stays in your browser, it is never sent to us, and it is removed when you sign out or when we find you are no longer signed in.
If you connect a serial adapter in the Trace or Simulator tool, your browser also keeps a second small note called osdp_baud: the speed (for example 9600) you connected at. It lets the page reopen your adapter when you come back, so you do not have to connect again. It stays in your browser, it is never sent to us, and it is removed when you press Disconnect or sign out. Separately, your browser itself remembers that you allowed this site to use your serial adapter; you can withdraw that in your browser’s site settings. If you connect a Bluetooth bridge in the Simulator, your browser shows its own list of nearby Bluetooth devices and the page sees only the one you pick; we store nothing about it, and nothing it sends or receives goes anywhere except between your browser and that device.
The cookie banner offers two optional categories, analytics and marketing. We do not use either today, so nothing is loaded for them. If that ever changes, we will update this page first, and those items will stay off until you allow them. You can change your choice at any time with Cookie settings at the bottom of every page.
When you sign in, Google’s own pages may set their own cookies. Those are covered by Google’s privacy policy.
A small number of Cypress staff with the admin role can see the list of people who have signed in (email address, name, role, tools and sign-in dates) and the log of role and tool changes, so they can manage access.
We use Google’s services (Firebase and Google Cloud) to run the site: hosting, our database, sign-in and the software that serves the tools. Google handles information on our behalf under its own terms, described in Google’s privacy policy. We may also disclose information if the law requires it.
Our database and servers are in the United States. If you use the site from another country, your information is sent there.
The site only works over HTTPS. Sign-in identifiers are stored only in scrambled form. Our servers check your role on every request, so being able to see a page does not by itself give access to anything behind it. No system is perfectly secure, but we limit what we collect and who can see it.
OSDP Tools is for professionals who install and service access control systems. It is not aimed at children, and we do not knowingly collect information from them.
If we change what we collect or how we use it, we will update this page and the date at the top.
Questions or requests about your information: solutions@cypressintegration.com or (810) 245-2300.
