How the website and LAB portal use your data.
Who is responsible
DataPurix runs this website and decides how the data described here is processed. For any question about it, or to use your rights, write to demo@datapurix.com.
What the web server records
Every request to the website is written to the web server's logs: your IP address, the date and time, the page or file requested, the response code and size, the page that linked to it (the referrer) and your browser's user-agent string. Errors are logged with the same address.
The portal uses a separate access log with your IP address, time, request method, page path, response code, size and processing time. It excludes query strings and referrers so sign-in codes are not recorded there.
We use these logs only to deliver the website, keep it working and protect it from abuse. The legal basis is our legitimate interest in running a secure website (Article 6(1)(f) GDPR).
The logs are rotated every day and deleted after 14 rotations, so no entry is kept for more than 15 days.
If requests from an address look like an attack, for example scanning for vulnerabilities or far too many requests, the server blocks that address automatically: for an hour, or for four weeks if it keeps coming back. The blocking service keeps its own log of blocked addresses for up to five weeks.
The public website
These statements apply to datapurix.com:
- It sets no cookies and uses no local storage.
- It has no analytics, advertising or tracking code.
- Fonts, scripts and images all come from datapurix.com itself, so your browser contacts no other site while you read.
- It has no forms. The demo and contact links open your own email program.
Portal accounts and essential cookies
The invitation-only LAB portal at app.datapurix.com uses essential first-party cookies to complete sign-in, maintain a session and protect forms. The identity service uses cookies for password and authenticator checks. These cookies do not support advertising or analytics.
If you choose Google sign-in, Google authenticates your account and provides its account identifier and basic profile information, including your name and email address. DataPurix uses these details to link an existing portal account. It does not request access to your Gmail, Drive, contacts or calendar. Google applies its own privacy terms and cookies during that sign-in. The DataPurix authenticator check still applies.
The portal's sign-in cookie lasts up to five minutes. An application session currently lasts up to five minutes before sign-in is checked again. The identity service can retain a sign-in session for up to eight hours, with a 30-minute inactivity limit. The sign-out page provides a separate option to end that identity session.
We store your account identity and profile, workspace permissions, site records, licence records and an audit history of administrative changes. The identity service stores protected password credentials and authenticator settings, and records security events. These records support account access, operation of the LAB and investigation of faults or misuse.
The portal is currently for controlled testing. Do not enter real customer or device-owner data. Account, workspace and audit records are retained during the LAB phase; their automatic deletion is not yet configured. Expired application sign-in and session records are removed by an hourly cleanup after they have been expired for more than a day. Identity security events are configured to expire after seven days.
If you email us
We use your email address and your message only to reply and to follow up on what you asked for. We delete them when they are no longer needed for that.
Where the data is
The website runs on a server in Frankfurt, Germany, rented from our hosting provider, which processes the logs on our behalf.
Portal application and identity records are hosted on that server. Encrypted recovery backups are stored separately on Hetzner Storage Box. Backup retention is currently managed manually during the LAB phase, so deleting an active record does not immediately remove it from existing backups.
Your rights
You can ask for access to your data, and ask us to correct or delete it, to restrict its processing, or you can object to it. Write to demo@datapurix.com. You can also complain to a data protection supervisory authority, for example the Irish Data Protection Commission (dataprotection.ie).
Changes
When what the website does changes, this page changes with it, and the date at the top shows when.