The fine print, kept short
Privacy
In effect since September 17, 2026. Marvel Mirror LLC d/b/a Sexton App · 2501 Chatham Rd #5694, Springfield, IL 62704 hello@sextonapp.com · 217-288-3351
The short version
Your cemetery's records stay on your own computer. We do not receive them, host them, or keep a copy, apart from anything you choose to send us or quote in a message to us. What we do handle is the small amount of information needed to issue your license, answer you when you write in, take payment, and see which pages of this website get read.
We do not sell information, we do not rent it, and we do not run advertising.
Your cemetery's records
They live on the computer where Sexton App is installed. Each cemetery has its own separate database file on that machine. There is no cloud copy of the register.
We do not receive them, apart from anything you choose to send or quote to us. License activation, license checks, and update checks do not send burial, plot, deed, interment, financial, map, report, or backup records. Cemetery and organization names used to identify licenses are licensing information, described below. As of this version, the application contacts exactly one address — activate.sextonapp.com — for the licensing and update requests described below.
Where copies of your records can exist, stated plainly:
- On your computer, in the application's own database. This is the working copy, and it sits on your equipment.
- Your own backups, wherever you keep them — an external drive, a second computer, a cloud backup service you use, or your operating system's own backup.
- Anything you export — a spreadsheet or PDF you save, email, or hand to someone.
- A file you send us. We hold none of the copies above. This one we hold, and only until we delete it — see "Files you send us."
- Anything you quote in a message to us. You can type a record detail into an email, into the contact form, or into the application's "Ideas & problems" screen. It is then in that message, and we keep the message. See "Writing to us." What goes in is what you typed. The application never puts a record into a message for you.
Licensing, activation, and updates
Activation sends your license key, your computer's operating-system platform, and a hashed fingerprint derived from a machine identifier — a one-way hash, not the identifier itself. About once a day the application sends the license key and that fingerprint and receives a signed statement of whether the license is current, renewed, expired, or revoked.
When replacing an older license, activation may also send the prior signed license file so we can verify the replacement. This is licensing information, not the cemetery database.
Starting a trial sends the organization or cemetery name and the email address you type on the first-launch setup screen, together with your computer's operating-system platform and the same hashed fingerprint, to the same licensing service. We use them to issue the trial license and to contact you about that trial, and we keep them with the license record. No cemetery records are sent.
Our licensing service keeps names and identifiers for your organization, its group of licenses, and each cemetery and license, together with which cemeteries belong to that group. It keeps the billing contact, each license's type, term, and status, and its computer allowance. For an organization sharing computers, it keeps a shared list of hashed fingerprints and records which cemetery licenses each computer may use, along with platforms and activation times.
It also keeps the history of current and replaced keys, checks of earlier licenses, and receipts for licensing operations such as issuing or replacing a key.
When you accept the agreement online, the application sends your name and organization, the agreement version and document hash, when and how you accepted it, and, where available, the application version, platform, and hashed computer fingerprint. We keep that acceptance record with the license.
Updates send the license key in a request header — not in the address — together with your computer's operating-system platform and the version of the application installed, and return a signed release manifest. The download is checked against a signing key built into the application before anything installs, and nothing installs until you click to install it.
If your office cannot connect to the internet, tell us and we will issue a license file for one specific computer from a machine code the application displays. A license issued that way does not check in: it makes none of the daily license checks described above, and an agreement acceptance recorded on that computer stays on that computer rather than being sent to us. The update check is the exception. It still runs when the application starts, and it sends the license key, the operating-system platform, and the version installed. No cemetery records are sent.
Cloudflare provides the hosting for this service and, like any host, briefly handles ordinary request details such as the IP address in order to deliver and protect it.
This website
What we measure. Which pages are read and how far down them, roughly where visitors arrive from, whether a phone number or email link was tapped, whether a free template was asked for and which one, what is opened and used inside the demonstration, and whether a buy button was clicked.
What we do not measure. No keystroke. No value you type into any field. No text of any record on the screen. No path your pointer takes. There is no session recording of this site or of the demonstration, and there is nothing here that can be replayed and watched afterwards.
Who processes it. Google Analytics. Google's own measurement script is served from sextonapp.com rather than from Google's domain, using Cloudflare's Google Tag Gateway — so the requests stay on this domain. That is a delivery arrangement, not an independence claim: Google still receives and processes the measurement data, under Google's terms.
What is stored in your browser. Two Google Analytics cookies (_ga and one named for this site's measurement ID), used to avoid counting one person's two visits as two people. Plus small first-party entries in local storage remember whether you have dismissed the notice (sexton-cookie-note-seen), turned analytics off (sexton-google-analytics-opt-out), or turned measurement off with ?sx-measure=off or the older ?analytics=off (sexton-owner-measurement-off). These consent and measurement entries are yes-or-no flags and stay in your browser. The address switch keeps our own testing visits out of the figures and works for whoever types it.
The demonstration also stores a screen preference and pending financial actions in your browser, as described below. Those entries are separate from the consent and measurement flags.
Your choice. The notice on your first visit carries a Turn off analytics button beside That's fine, in the same size and the same style. An Analytics link in the footer of every page reopens that choice at any time: it tells you what is true right now and offers the opposite. Turning it off stops measurement from that moment and deletes the two Google Analytics cookies, rather than merely ignoring them.
If your browser sends Global Privacy Control, analytics is off before Google's script has a chance to load and we do not put the notice in front of you.
Measurement does run on your first page view unless you have that signal on.
We do not run advertising networks, remarketing, Google Signals, or cross-site tracking, and we do not sell or share information for advertising.
The demonstration
The demonstration at /demo runs in your browser on a made-up sample cemetery. Its working register lives in memory and resets when you reload or close the page. The sample records and anything you type into the demonstration are not sent to us. It will not read a spreadsheet from your computer — the import screen is still there to look at, but choosing a file is refused.
Some information can remain in your browser's local storage after the working register resets. sexton.screen remembers a screen preference. When you submit a financial action, such as a ledger entry, sexton-pending-financial-operations-v2 saves the complete pending action before attempting it. This includes any details you entered for that action, such as a title, date, or amount, together with its register and operation identifiers. A confirmed success or explicit refusal clears that action; if the outcome is uncertain, it remains locally for recovery across reloads. An older entry named sexton-pending-financial-operation-v1 is moved into the current storage and removed after that move succeeds. These entries are not sent to us. Clearing this site's data in your browser removes them, including any pending recovery details.
The page is measured like any other page on this site, and what you do in it is measured too: which screens you open and in what order, which controls you use, how many plots you open, how long you stay, and the screen you were on when you left. That is the whole of it. Opening a plot is recorded as one plot opened and never as which plot, the sample records on the screen are never read, and nothing you type is either.
Writing to us
The contact form sends us the name, email, phone, and message you typed, delivered to us by email. We use it to answer you and to follow up on your question.
It also uses two ordinary anti-spam measures: a hidden field a person never sees and a robot often fills, and a check on how quickly the form was submitted. Like every page request, it carries ordinary network details such as the IP address.
Asking for a template. The free templates under /guides ask for your email address and the name of your cemetery before the download starts. We use the address to know who is using them and to write to you if we add more. We do not pass it to anyone. Ask us and we will delete it.
The download does not depend on any of that: it begins when you press the button, whether or not the message reaches us.
Email and phone. What you send us by email or say on the phone we keep with the business records for that conversation, so we can pick up where we left off.
"Ideas & problems" in the application. Sexton App has a screen for sending us an idea or a problem. Nothing is sent from it unless you press Send. When you press Send we receive the words you typed, at the same licensing service described above. We also receive whether you marked the message an idea or a problem, the version of the application, your computer's operating-system platform, and your license key. No file is attached, and the application adds nothing of its own to what you wrote. If you quote a record in the message, that quotation reaches us with it, because what the message says is what you typed. We read it to answer you and to improve the application. To write back, we take the cemetery name and the office email address from your license record. We keep the message until you ask us to delete it, or until we no longer need it to answer you.
Business outreach
We contact cemeteries that have not asked to hear from us. Some of our email is outreach to cemetery offices, sent to a work address, not to anyone who signed up.
Where the addresses come from. Public government registries, public organisation websites, and ordinary business correspondence.
What the links carry. A link in one of our outreach emails contains a random code unique to that message. When it is clicked, our redirect at go.sextonapp.com records that a click happened and when, and sends you to the page. The redirect stores no IP address, no browser identity, and no referrer — one timestamp, one counter, and, if you unsubscribe, one more timestamp.
What this is. The code is random and means nothing to anyone else, but it is not anonymous to us: we can match it back to the outreach record, and therefore to you. It is pseudonymous, not anonymous.
Google Analytics sees that code too. The page you land on carries it in the web address, so it reaches our analytics along with the rest of the page address. Google cannot work out who you are from it: the code is random, and the list matching codes to people never leaves our office.
We do not use tracking pixels in email. Nothing tells us that a message was opened, apart from the click described above.
Stopping it. Every outreach email carries a working unsubscribe link and a one-click unsubscribe your mail program can use. Unsubscribing suppresses your address across everything we send. You can also just reply and say so.
Payment
Card payment is handled on QuickBooks' own checkout page. We never see or store your card number. If you pay by invoice or check, the billing and correspondence information needed to issue and renew the license is kept with the business records for that purchase.
Files you send us
If you send a spreadsheet for importing or a database for support, we use it only for the work you asked for and delete our working copy when that work is done.
How long things are kept
License records, including organization and cemetery relationships, computer permissions, agreement acceptances, and key and operation history, for as long as the license exists, and afterwards with the business records for that sale.
The record that a computer has already had a trial — the hashed fingerprint, the license it was issued for, and the date — is kept for as long as we issue trials, because it is what stops a second trial being issued on the same computer.
Correspondence — email, contact-form messages, and the "Ideas & problems" messages sent from inside the application. We keep it unless you ask us to delete it, or until we no longer need it to answer you. Anything we must keep for accounting or to settle a dispute is kept even then.
Suppression records are kept even after other outreach information is deleted, so that a request not to be contacted is not lost when the rest is.
Template requests — the address and cemetery name you gave — with the correspondence for that request, unless you ask us to delete it.
Analytics on Google's retention schedule for this property.
Asking us about your information
Write to hello@sextonapp.com or call 217-288-3351 and ask us to show you what we hold, correct it, delete it, or stop contacting you. Tell us enough to find the record.
If there is something we cannot delete, we will say so and why — an accounting record we are required to keep, or a suppression entry that exists to honour an earlier request.
We handle these requests as a matter of policy, not because a statute compels us.
Children
The Sexton App software is made for cemetery offices. It is not directed to children and we do not knowingly collect information from anyone under 13.
Changes
The effective date at the top changes whenever this page does. We keep the earlier versions but do not publish them; ask us what one said and we will tell you.