Privacy policy

1. Controller

The controller of your personal data is Bitflip Wojciech Jarczak, ul. Lęborska 3B, 80-386 Gdańsk, Poland, VAT ID PL9581734428 (Bitflip, the maker of NOCless). Contact for anything about your data: contact@nocless.com.

We have not appointed a data protection officer; at our scale of processing this is not required (Article 37 GDPR).

2. What we process

This is a static website: no accounts, no forms, no cookies of our own, no advertising or tracking. Personal data reaches us in two ways only.

• Technical data of each request, processed by our hosting and CDN provider Cloudflare: IP address, user agent, requested URL, referrer and time. Your browser may also send Cloudflare Network Error Logging reports (to a.nel.cloudflare.com) when a request to this site fails — they describe the failure, not you or the page content.
• What you send when you e-mail us (demo@nocless.com, contact@nocless.com): your address, name, the message and anything attached.

3. Purposes and legal bases

• Serving the site, keeping it available and protecting it from abuse (request data) — our legitimate interest, Article 6(1)(f) GDPR.
• Answering a demo request or other enquiry about NOCless — steps taken at your request before a contract, Article 6(1)(b) GDPR; for any other correspondence, our legitimate interest in replying, Article 6(1)(f).
• Keeping correspondence to establish or defend legal claims — our legitimate interest, Article 6(1)(f); and, where it leads to a contract, our legal obligations under tax and accounting law, Article 6(1)(c).

4. How long we keep it

• Request data: we keep no copies of our own; Cloudflare retains its logs for the periods set out in its documentation.
• E-mail: until the matter is closed, then for as long as claims arising from it can be brought under Polish law, or — if it leads to a contract — for the periods required by tax and accounting law.

5. Who receives it

We do not sell or share personal data. These service providers process it on our behalf, under data processing agreements:

• Cloudflare, Inc. (USA) — hosting of this site, content delivery and security. Transfers outside the EEA are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses.
• Microsoft Ireland Operations Limited — our e-mail (Microsoft 365). Any transfer outside the EEA within Microsoft's group is covered by Standard Contractual Clauses.

6. Cookies and analytics

This site sets no cookies of its own and stores nothing in your browser. Cloudflare may set a strictly necessary security cookie to tell people from bots; it is not used to track you.

If we enable analytics, it will be Plausible — cookieless, storing no personal data, with no consent banner needed. This policy will be updated when it is switched on; until then, not even that runs.

We do not profile visitors or make automated decisions about anyone (Article 22 GDPR).

7. Your rights

Under the GDPR you have the right to:

• access your data (Article 15) and have it corrected (Article 16);
• have it erased (Article 17) or its processing restricted (Article 18);
• receive it in a portable format (Article 20), where processing is based on a contract;
• object at any time to processing based on our legitimate interest (Article 21) — we then stop, unless we show compelling legitimate grounds or need the data for legal claims;
• lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

8. How to exercise them

Write to contact@nocless.com. We answer within one month; where a request is complex we may extend that by two more months and will tell you why. Giving us your data is voluntary — without it, we just cannot reply to your e-mail.

9. Changes

When this policy changes, the date at the top changes with it.