Privacy notice.

This notice describes the intended data flow for this website. The legal entity and operational retention settings must be confirmed before public launch.

Who handles your information

The controller's registered legal name, address and registration details are pending confirmation. Contact [email protected] for questions. This local project does not assert an unregistered company identity.

Information you choose to send

Snapshot, checklist and contact requests collect the fields shown on the form: contact details, company, role, country and product information. Snapshot requests also ask about EU sales, build stack and shareable artifacts. Do not upload source code or secrets through the form. We agree a separate authorised sharing process before reviewing build material.

We use the details to respond to your request, deliver the requested material and discuss the related service. No newsletter subscription is created by submitting a form. The controller must confirm the applicable GDPR lawful basis, retention schedule and rights process before launch.

Processors

Cloudflare serves the website and runs the form endpoint. Brevo receives the contact record and sends requested email when the service is configured. Provider processing locations, contractual safeguards and any international transfers must be reviewed in the final processor agreements. A statement about EU hosting of service artifacts does not imply every website processor operates exclusively in the EU.

If enabled, Plausible provides cookie-less aggregate analytics. Events include form submission, calendar clicks, checklist requests, calculator use and pricing views. Form values and calculator inputs are not sent as analytics event properties. No analytics script is loaded until a domain is configured.

Abuse prevention and retention

The endpoint uses a honeypot, submission timing and an IP-based rate limiter. A salted hash is used for rate-limit keys rather than storing raw IP addresses in the rate-limit store. Cloudflare may separately process connection data under its own service arrangements. Final retention and processor controls must be recorded before deployment.

Your choices and rights

You can ask about access, correction, deletion, restriction, objection and portability where applicable, and can complain to the competent supervisory authority. Contact [email protected] with the request. Supplying form information is voluntary, but a valid address is needed to reply. Do not publish this draft as a completed legal notice until the controller details are reviewed.