Privacy Policy

Last updated: July 2026

This document was not drafted by a lawyer. It reflects standard GDPR practices, but we recommend a professional review before treating it as legally complete, especially as the business grows.

1. Who operates this site

Semnal (semnal.cloud) is operated by Ion, a private individual, based in Porto Viro, Italy. For any question about your personal data, you can contact us at bylion854i@icloud.com.

2. What data we collect

If you create an account: your email address and password (stored encrypted, never in plain text — not even we can see it)
Scan history: the URLs you scan, the scan results, date and time — saved only if you're logged in
Automatic technical data: your IP address, used temporarily to limit the number of requests (abuse protection), not permanently stored linked to your account
Cookies: a single technical cookie (authentication session), plus a language preference saved locally in your browser — see the Cookies section below

We don't collect payment data (payment processing is handled directly by Stripe — it never reaches our servers), we don't track your behavior on other sites, and we don't sell or rent data to third parties.

3. Why we collect this data (legal basis)

Contract performance (GDPR Art. 6.1.b) — to provide the scanning and account service, we need your email and password
Legitimate interest (GDPR Art. 6.1.f) — per-IP rate limiting protects the service from abuse and keeps costs manageable for everyone

4. Who we share data with

We use the following third-party providers (data processors), all with servers in the European Union:

Neon (database) — stores your account and scan history, server in the eu-central-1 region (Frankfurt)
Render (hosting) — runs the application, server in Frankfurt (EU Central)
Resend (email delivery) — used for password reset and account confirmation emails
Stripe (payments) — processes subscriptions; card data never reaches our servers

None of these providers use your data for their own purposes.

5. How long we keep data

Account data and scan history stay stored as long as your account is active. You can request complete deletion at any time — directly from your profile (the "Delete account" button), or by contacting us.

6. Cookies

Session cookie (semnal_auth) — strictly necessary, keeps you logged in; expires after 30 days or on logout
Language preference — saved locally in your browser (localStorage), not sent to the server

We don't use marketing cookies, third-party analytics, or advertising tracking.

7. Your rights (GDPR)

You have the right to:

Request a copy of the data we hold about you (right of access)
Correct inaccurate data (right to rectification)
Request complete deletion of your account and associated data (right to erasure) — self-service, from your profile
Receive your data in a portable format (right to data portability)
Object to processing based on legitimate interest (right to object)
Lodge a complaint with the supervisory authority — in Italy, the Garante per la Protezione dei Dati Personali

For any request, write to bylion854i@icloud.com — we respond within a maximum of 30 days.

8. Changes to this policy

If we update this policy, the date above will change. Significant changes will be announced visibly on the site.