Privacy Policy
This page describes the processing implemented in the software. The operator must review and complete it legally before production use.
Controller
The controller for the processing described here is the operator named in the imprint.
- Operator
- SkafTech – Inhaber: Taha Khattari
- Address
- Kaiserstraße 162a44143 DortmundDeutschland
- Responsible for content
- Taha Khattari, Kaiserstraße 162a, 44143 Dortmund
Account and organization data
To provide the service we process the name, email address, organization and role of registered users. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Uploaded artifacts
Files you upload for analysis are stored in storage that is isolated per tenant and project and processed only to produce findings and reports. Secrets detected in snippets are redacted before they are stored as evidence. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Server logs and security
For security and troubleshooting, requests are logged with technical data such as timestamp, request path and a correlation ID. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR).
Cookies and local storage
We use only technically necessary cookies and browser storage for sign-in, language and your cookie choice. No advertising tools are active, and the website statistics described below use no cookies. Details are listed in the cookie policy.
Website statistics without cookies
To learn which public pages are read and how visitors find us (for example through a search engine), we count page views of public pages ourselves. Nothing is stored on your device. We record the page, the referring website, the language, the device class (desktop, tablet, mobile) and campaign parameters of the link. Your IP address and browser identifier are only used to form a code that changes every day and is not stored in readable form, so a visit can be counted once per day but not followed across days. Signed-in application pages are never counted. If your browser sends Do-Not-Track or Global Privacy Control, nothing is recorded. Records are deleted after 13 months. Legal basis: legitimate interest in improving our website (Art. 6(1)(f) GDPR).
Processors
Hosting and storage providers process data on our behalf under data processing agreements. The current list is published on the subprocessors page.
Retention
Data is kept for as long as your account exists or as required by statutory retention periods. Audit log retention depends on your plan.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority.