Privacy Policy

1. Data Controller

The data controller for this service is:

2. Data We Collect

2.1 Email Address (Optional)

If you choose to download a PDF report or clean requirements file, we collect your email address.

• Purpose: To deliver your security report and send security-related updates
• Storage: Processed via MailerLite (GDPR-compliant email service)
• Retention: Until you unsubscribe
• Legal Basis: Consent (Article 6(1)(a) GDPR)

2.2 Dependency Data (Temporary)

When you scan dependencies, the package names you submit are:

• Processed: Sent to external APIs (PyPI, deps.dev, pub.dev, OSV.dev) to check for vulnerabilities
• NOT Stored: We do not store your dependency lists on our servers
• NOT Logged: Package names are not written to logs

2.3 Technical Data

Standard web server logs may include:

• IP address (anonymized where possible)
• Browser type and version
• Pages visited and time of access

This data is used for security monitoring and service improvement only.

3. Data We Do NOT Collect

4. Third-Party Services

We use the following third-party services:

5. Cookies

Redakta uses minimal, essential cookies only:

• Session cookies: Required for the application to function
• No tracking cookies: We do not use Google Analytics, Facebook Pixel, or similar

6. Your Rights Under GDPR

As a data subject, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Unsubscribe from emails at any time via the link in each email

To exercise these rights, contact us at info@sekura.se

7. Data Retention

• Email addresses: Retained until you unsubscribe from our mailing list
• Server logs: Automatically deleted after 30 days
• Scan data: Not retained — processed in memory only

8. Security Measures

We implement appropriate technical and organizational measures including:

• HTTPS encryption for all data in transit
• Secure API handling with no local data storage
• Regular security reviews of dependencies
• Access controls on administrative systems

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending an email to subscribers.

10. Contact Us

For any privacy-related questions or concerns: