The fine print, kept short
Privacy
In effect since September 9, 2026. Marvel Mirror LLC d/b/a Sexton App · 2501 Chatham Rd #5694, Springfield, IL 62704 [email protected] · 217-288-3351
The short version
Your cemetery's records stay on your own computer. We do not receive them, host them, or keep a copy. What we do handle is the small amount of information needed to issue your license, answer you when you write in, take payment, and see which pages of this website get read.
We do not sell information, we do not rent it, and we do not run advertising.
Your cemetery's records
They live on the computer where Sexton App is installed. Each cemetery has its own separate database file on that machine. There is no cloud copy of the register.
We do not receive them. License activation, license checks, and update checks do not send burial, plot, deed, interment, financial, map, report, or backup records. Cemetery and organization names used to identify licenses are licensing information, described below. As of this version, the application contacts exactly one address — activate.sextonapp.com — for the licensing and update requests described below.
Where copies of your records can exist, stated plainly:
- On your computer, in the application's own database. This is the working copy, and it sits on your equipment.
- Your own backups, wherever you keep them — an external drive, a second computer, a cloud backup service you use, or your operating system's own backup.
- Anything you export — a spreadsheet or PDF you save, email, or hand to someone.
- A file you send us. This is the only one we ever hold, and only until we delete it — see "Files you send us."
Licensing, activation, and updates
Activation sends your license key, your computer's operating-system platform, and a hashed fingerprint derived from a machine identifier — a one-way hash, not the identifier itself. About once a day the application sends the license key and that fingerprint and receives a signed statement of whether the license is current, renewed, expired, or revoked.
When replacing an older license, activation may also send the prior signed license file so we can verify the replacement. This is licensing information, not the cemetery database.
Our licensing service keeps names and identifiers for your organization, its group of licenses, and each cemetery and license, together with which cemeteries belong to that group. It keeps the billing contact, each license's type, term, and status, and its computer allowance. For an organization sharing computers, it keeps a shared list of hashed fingerprints and records which cemetery licenses each computer may use, along with platforms and activation times.
It also keeps the history of current and replaced keys, checks of earlier licenses, and receipts for licensing operations such as issuing or replacing a key.
When you accept the agreement online, the website or application sends your name and organization, the agreement version and document hash, when and how you accepted it, and, where available, the application version, platform, and hashed computer fingerprint. We keep that acceptance record with the license.
Updates send the license key in a request header — not in the address — and return a signed release manifest. The download is checked against a signing key built into the application before anything installs, and nothing installs until you click to install it.
If your office cannot connect to the internet, tell us and we will issue a license file for one specific computer from a machine code the application displays. A license issued that way makes no automatic requests at all.
Cloudflare provides the hosting for this service and, like any host, briefly handles ordinary request details such as the IP address in order to deliver and protect it.
This website
What we measure. Which pages are read and how far down them, roughly where visitors arrive from, whether a phone number or email link was tapped, whether a free template was asked for and which one, what is opened and used inside the demonstration, and whether a buy button was clicked.
What we do not measure. No keystroke. No value you type into any field. No text of any record on the screen. No path your pointer takes. There is no session recording of this site or of the demonstration, and there is nothing here that can be replayed and watched afterwards.
Who processes it. Google Analytics. Google's own measurement script is served from sextonapp.com rather than from Google's domain, using Cloudflare's Google Tag Gateway — so the requests stay on this domain. That is a delivery arrangement, not an independence claim: Google still receives and processes the measurement data, under Google's terms.
What is stored in your browser. Two Google Analytics cookies (_ga and one named for this site's measurement ID), used to avoid counting one person's two visits as two people. Plus small first-party entries in local storage, which are these and no others: whether you have dismissed the notice (sexton-cookie-note-seen), whether you have turned analytics off (sexton-google-analytics-opt-out), and whether measurement is off because the address carried ?sx-measure=off or the older ?analytics=off (sexton-owner-measurement-off) — our own testing switch, so our visits stay out of the figures, and it works for whoever types it. None of them leaves your browser, and each one holds a single yes or no.
Your choice. The notice on your first visit carries a Turn off analytics button beside That's fine, in the same size and the same style. An Analytics link in the footer of every page reopens that choice at any time: it tells you what is true right now and offers the opposite. Turning it off stops measurement from that moment and deletes the two Google Analytics cookies, rather than merely ignoring them.
If your browser sends Global Privacy Control, analytics is off before Google's script has a chance to load and we do not put the notice in front of you.
Measurement does run on your first page view unless you have that signal on.
We do not run advertising networks, remarketing, Google Signals, or cross-site tracking, and we do not sell or share information for advertising.
The demonstration
The demonstration at /demo runs in your browser on a made-up sample cemetery. The sample records live in your browser's memory while the page is open and are gone when you close it — nothing you do in the demonstration reaches us. It will not read a spreadsheet from your computer — the import screen is still there to look at, but choosing a file is refused.
The page is measured like any other page on this site, and what you do in it is measured too: which screens you open and in what order, which controls you use, how many plots you open, how long you stay, and the screen you were on when you left. That is the whole of it. Opening a plot is recorded as one plot opened and never as which plot, the sample records on the screen are never read, and nothing you type is either.
Writing to us
The contact form sends us the name, email, phone, and message you typed, delivered to us by email. We use it to answer you and to follow up on your question.
It also uses two ordinary anti-spam measures: a hidden field a person never sees and a robot often fills, and a check on how quickly the form was submitted. Like every page request, it carries ordinary network details such as the IP address.
Asking for a template. The free templates under /guides ask for your email address and the name of your cemetery before the download starts. We use the address to know who is using them and to write to you if we add more. We do not pass it to anyone. Ask us and we will delete it.
The download does not depend on any of that: it begins when you press the button, whether or not the message reaches us.
Email and phone. What you send us by email or say on the phone we keep with the business records for that conversation, so we can pick up where we left off.
Business outreach
We contact cemeteries that have not asked to hear from us. Some of our email is outreach to cemetery offices, sent to a work address, not to anyone who signed up.
Where the addresses come from. Public government registries, public organisation websites, and ordinary business correspondence.
What the links carry. A link in one of our outreach emails contains a random code unique to that message. When it is clicked, our redirect at go.sextonapp.com records that a click happened and when, and sends you to the page. The redirect stores no IP address, no browser identity, and no referrer — one timestamp, one counter, and, if you unsubscribe, one more timestamp.
What this is. The code is random and means nothing to anyone else, but it is not anonymous to us: we can match it back to the outreach record, and therefore to you. It is pseudonymous, not anonymous.
Google Analytics sees that code too. The page you land on carries it in the web address, so it reaches our analytics along with the rest of the page address. Google cannot work out who you are from it: the code is random, and the list matching codes to people never leaves our office.
We do not use tracking pixels in email. Nothing tells us whether a message was opened.
Stopping it. Every outreach email carries a working unsubscribe link and a one-click unsubscribe your mail program can use. Unsubscribing suppresses your address across everything we send. You can also just reply and say so.
Payment
Card payment is handled on QuickBooks' own checkout page. We never see or store your card number. If you pay by invoice or check, the billing and correspondence information needed to issue and renew the license is kept with the business records for that purchase.
Files you send us
If you send a spreadsheet for importing or a database for support, we use it only for the work you asked for and delete our working copy when that work is done.
How long things are kept
License records, including organization and cemetery relationships, computer permissions, agreement acceptances, and key and operation history, for as long as the license exists, and afterwards with the business records for that sale.
Correspondence — email and contact-form messages — unless you ask us to delete it, subject to what we must keep for accounting and to settle a dispute.
Suppression records are kept even after other outreach information is deleted, so that a request not to be contacted is not lost when the rest is.
Template requests — the address and cemetery name you gave — with the correspondence for that request, unless you ask us to delete it.
Analytics on Google's retention schedule for this property.
Asking us about your information
Write to [email protected] or call 217-288-3351 and ask us to show you what we hold, correct it, delete it, or stop contacting you. Tell us enough to find the record.
If there is something we cannot delete, we will say so and why — an accounting record we are required to keep, or a suppression entry that exists to honour an earlier request.
We handle these requests as a matter of policy, not because a statute compels us.
Children
The Sexton App software is made for cemetery offices. It is not directed to children and we do not knowingly collect information from anyone under 13.
Changes
The effective date at the top changes whenever this page does. We keep the earlier versions but do not publish them; ask us what one said and we will tell you.