Privacy Policy & Data Protection (GDPR / Global Standards)

v1.0

1. Data Collection

We only collect information strictly necessary for secure authentication and service delivery: email address, display name, cryptographic session records, and scanner preferences. No invasive personal identification is mandated for browsing.

2. Cookies & Sessions

We use technical session cookies with strict security flags (HttpOnly, SameSite=Lax, Secure) solely for active session persistence and language preference. We do not engage in third-party tracking or behavioral ad profiling.

3. Cryptographic Storage & Encryption

All passwords are encrypted with industry-standard salted hashing (bcrypt). All communications between client browsers and our endpoints are encrypted via TLS/HTTPS protocols.

4. User Rights & Data Deletion

Under GDPR and privacy regulations, users may request export, rectification, or complete deletion of their account data at any time via [email protected].