DATA RETENTION PROTOCOL

EFFECTIVE DATE: JANUARY 2026 // CONTROLLER: RATIONAL MYSTIC LLC

** WARNING **: You are accessing the privacy documentation for the White Rabbit Forensics platform. By using this system, you acknowledge the data practices outlined below.

1. MISSION SCOPE (Data Collection)

We collect the following "Intelligence" to operate the simulation and waitlist:

• Identity Markers: Email address, Name (if provided).
• Telemetry: Operational progress (levels completed, badges earned) within the White Rabbit OS.
• Connection Logs: IP addresses and browser agents for security auditing.

2. OPERATIONAL USAGE (How We Use Data)

Rational Mystic LLC utilizes this data for the following directives:

• Access Control: Managing the waitlist and issuing "Authorized Analyst" credentials.
• Briefings: Sending email updates regarding platform launch, new case files, and relevant training opportunities (Marketing).
• System Integrity: Detecting and preventing unauthorized access or abuse of the simulation.

3. THIRD-PARTY ASSETS

We utilize secure third-party contractors for infrastructure:

• Netlify: Hosting and Identity Management.
• Neon (PostgreSQL): Secure database storage for game progress.
• PostHog (EU): Anonymous product analytics — tracks feature usage patterns. No personal data shared. Data hosted in the EU.
• Microsoft Clarity: Anonymous session recordings and heatmaps. Sensitive on-screen content is masked.

4. ANALYST RIGHTS (GDPR / CCPA)

Under international protocols, you possess the following clearance levels regarding your data:

• Right to Erasure: Request the complete deletion of your dossier from our servers.
• Right to Access: Request a copy of all data held under your identifier.
• Opt-Out: You may unsubscribe from "Briefings" (Marketing) at any time via the link in the footer of our emails.
• Analytics Opt-Out: You may decline analytics tracking when first prompted, or clear your browser's local storage at any time to reset your preference.

5. COMMAND CONTACT

To exercise these rights or report a breach, contact the Data Controller: