Privacy Policy

Controller

DuneDive LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA. Contact: [email protected] · +41 44 974 28 25.

Data we collect

Account data, usage data, inspection content you upload, and contact-form submissions (name, company, email, message).

Purposes & legal basis

Contract performance (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f)), and consent where required (Art. 6(1)(a)).

Hosting (Germany)

Application data is hosted in Germany with GDPR-compliant processors.

Cookies & analytics

Essential cookies only: a language preference cookie for every visitor, plus a session cookie for the admin login. For reach measurement we run Umami, an analytics tool we host ourselves on our own server at Hetzner Online GmbH in Falkenstein, Germany. The tracking script sets no cookies and writes nothing into your browser storage. If your browser sends a Do Not Track signal, no measurement takes place. Your IP address is processed in transit only, to run a bot and blocklist check, to derive an approximate location and to compute a non-reversible visitor hash. It is never written to the analytics database. The hash is salted with a value that rotates monthly, so visits cannot be linked across rotation periods. Recorded per visit: page path and query string, referrer, page title, browser, operating system, device type, screen size, language, country, region and city. No names, no email addresses, no account identifiers, no profile across other websites. The data stays on our own server, is not passed to any third party and is not used for advertising. Independently of this, our web server keeps access logs including IP addresses for 14 days for security and troubleshooting, after which they are deleted automatically.

Third parties / processors

Processors are bound by data-processing agreements: Hetzner Online GmbH, Germany (hosting); Resend, Inc., USA (transactional email); Cloudflare, Inc., USA (DNS/CDN and DDoS protection). Transfers to the USA rely on the EU-US Data Privacy Framework and/or standard contractual clauses.

Your rights

Access, rectification, erasure, restriction, portability and objection under GDPR. Contact [email protected] to exercise them.

Retention

Data is retained only as long as necessary for the stated purposes or statutory obligations, then deleted.

Data protection contact

No data protection officer is appointed (not legally required). All privacy requests: [email protected].