VOIDWALL
Try the live demo Become early adopter →

Legal

Privacy Policy

Last updated: 14 July 2026

Who we are

This website (voidwall.io), including the live demo and the early-adopter programme, is operated by NRTW Adam Tulejko, ul. Bł. Ks. Jolanty 3/2, 71-220 Szczecin, Poland — the data controller responsible for your personal data. For any question about this policy or your data, contact us at privacy@voidwall.io.

This policy is organised by activity. For each one we set out what data we process, why, our legal basis, who receives it, and how long we keep it.

How we process your data

1. Early-adopter subscription

  • Data processedYour email address, and a record of your consent (date and time).
  • PurposeTo send you early-access invitations and occasional Voidwall product updates.
  • Legal basisYour consent (GDPR Art. 6(1)(a)). Providing your email is voluntary; without it you cannot join the early-adopter mailing list.
  • RecipientsMailerLite, which stores your email and delivers our messages on our behalf.
  • RetentionWe keep your email until you unsubscribe or ask us to delete it. After that we keep proof of your consent for up to 3 years (the period during which related claims may arise), and a minimal suppression-list entry for as long as necessary to make sure we do not add you again.
  • Please noteYou can withdraw consent at any time via the unsubscribe link in any email or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.

2. Email enquiries and early-adopter correspondence

  • Data processedYour email address and anything you choose to include — for example your name, company, job role, use case, or message content — such as when you reply to our welcome email.
  • PurposeTo respond to you and to discuss possible participation in the early-adopter programme.
  • Legal basisOur legitimate interest (GDPR Art. 6(1)(f)) in handling enquiries, and/or taking steps at your request before entering a possible agreement.
  • RecipientsCloudflare (Email Routing) forwards messages sent to our addresses to Google (Gmail), where we read and reply to them. Both act on our behalf.
  • RetentionUntil your enquiry is resolved and for up to 24 months after our last substantive exchange, then deleted.
  • Please notePlease do not include special-category data or confidential information you would not want us to process.

3. Live demo

  • Data processedThe payload you submit, the operation you select (scan or redaction), the content type, and related request options.
  • PurposeSolely to produce the scan or redaction result you requested.
  • Legal basisOur legitimate interest (GDPR Art. 6(1)(f)) in letting you try the product.
  • RecipientsProcessed by our own application on Fly.io; not shared with anyone else.
  • RetentionYour payload is processed in memory and discarded once the response is returned — we do not store it. Our servers keep only operational logs (for example errors and request counts) that do not contain your payload.
  • Please noteDo not submit real personal data, credentials, special-category data, or confidential information. Use test or sample data only.

4. Website delivery, security, and technical logs

  • Data processedTechnical data needed to serve and protect the site: IP address, request time, requested path, user agent, response status, and abuse-prevention events (rate limiting).
  • PurposeTo deliver the website, keep it available and secure, and prevent abuse.
  • Legal basisOur legitimate interest (GDPR Art. 6(1)(f)) in operating a secure, reliable service.
  • RecipientsFly.io, which hosts the site on our behalf. Your IP address is read only to apply per-IP rate limiting and is held transiently in memory for that purpose; it is not written to an application database.
  • RetentionOperational and platform logs are kept only for a short period (no longer than 30 days) and are then deleted.

5. Aggregate website analytics

  • Data processedCookieless, aggregate measurements such as page views, referrer, approximate country, and device or browser type.
  • PurposeTo understand traffic and improve the site.
  • Legal basisOur legitimate interest (GDPR Art. 6(1)(f)) in measuring and improving the site.
  • RecipientsCloudflare, which provides the Web Analytics on our behalf. When your browser sends the analytics beacon, Cloudflare also receives your IP address and user agent to process it, but Cloudflare states it does not store your IP, does not use cookies or local storage, and does not fingerprint you or track you across sites.
  • RetentionWe hold only aggregate figures, which contain no personal data.

Cookies

We use no tracking or advertising cookies, and our analytics are cookieless. The MailerLite signup form sets a small number of functional cookies and local-storage entries to operate the form — for example to keep your form session and to remember that you have already submitted it. They are limited to running the form and are not used to track you.

International transfers

Some of our providers are based outside the European Economic Area (EEA):

  • Fly.io (United States) — hosting — relies on the EU–US Data Privacy Framework.
  • Cloudflare (United States) — analytics and email routing — relies on the EU–US Data Privacy Framework and, where applicable, Standard Contractual Clauses.
  • Google (United States) — email inbox (Gmail) — relies on the EU–US Data Privacy Framework and, where applicable, Standard Contractual Clauses.
  • MailerLite Limited (Ireland) — email — provides our email-marketing service. Where MailerLite or its sub-processors transfer personal data outside the EEA, they use Standard Contractual Clauses or another valid transfer mechanism.

You can ask us for more information about these safeguards, or a copy of them, using the contact details above.

Automated decision-making

We do not use your personal data for profiling or automated decisions that produce legal or similarly significant effects.

Your rights

Where the relevant legal conditions are met, you have the right to access, correct, delete, or restrict processing of your data, to object to processing based on our legitimate interests, to data portability, and to withdraw consent at any time (see the subscription activity above). You can unsubscribe from any email using the link in its footer, or contact us at privacy@voidwall.io.

If you believe we have handled your data unlawfully, you can lodge a complaint with the Polish supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw — or with the supervisory authority where you live or work.

Changes to this policy

We may update this policy from time to time. For minor editorial changes we will simply update the date at the top. For material changes — for example to the purposes, recipients, or legal bases — we will take reasonable steps to inform subscribers before the change takes effect.