We design processing with nLPD principles in mind: purpose limitation, proportionality, transparency, and security.

Where GDPR applies, we aim to support data subject rights and appropriate safeguards for cross-border transfers.

Rate limiting, encrypted sessions, auditable billing events, and bot telemetry minimization. Raw IPs are not stored; only a salted hash prefix is kept for short-term security analytics. For enterprise DPA and security questionnaires, contact [email protected].

Raw hit events are retained for a limited period (typically 30 days). Aggregated daily statistics are retained longer for reporting.