Privacy notice

What we process

Account data: your name, work email, organization name and role assignments. Used to authenticate you and authorize actions in the console.

Telemetry: per-request decision records containing a truncated network identifier (IPv4 /24, IPv6 /48), country, ASN, request route, method, decision, reason code and score. These records explain filtering decisions and are not used to profile individuals.

Billing data: plan, request volume and invoicing contact. Payment card data is handled by our payment processor and never reaches our servers.

What we never collect

We do not store full visitor IP addresses, request bodies, cookies, headers beyond the user agent family, or any content served by your application.

The challenge script sets a single first-party cookie scoped to your domain to remember a passed challenge. It contains no identifiers usable across sites and performs no tracking.

Retention

Security events are retained for 14 to 90 days depending on your plan. Aggregated counters are retained for 13 months. Audit records are retained for 24 months. Deleting a site removes its events within 30 days.

Your rights

You can export or delete your account data from the console, or by writing to privacy@killthebots.net. We respond to access, correction and deletion requests within 30 days.

For visitors to your website you are the controller and we act as processor. Our data processing agreement is available on request.