Privacy Policy

Last updated: July 2026

euRedact Rules (Open Source SDK)

euRedact Rules runs entirely on your machine. No data is transmitted to any external server. We do not collect, store, or process any text you redact using the SDK. There is no telemetry, no analytics, and no network calls.

Website

This website (euredact.dev) is hosted on GitHub Pages, operated by GitHub, Inc. We set no cookies and use no third-party analytics. However, GitHub automatically logs technical data when you visit — including your IP address, browser user agent, and the pages you request — as part of serving and securing the site. This processing is carried out by GitHub as our hosting provider; see the GitHub Privacy Statement. Our legal basis is our legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR).

Browsing this website sends no data to third parties. Fonts, icons, and the map on our homepage are served from this website rather than from a content delivery network, and we do not use any IP geolocation service — the homepage code example is chosen from your browser's own language settings, which are never sent to us. The only request outside this site is to our own analytics server, described below; it is infrastructure we operate ourselves, not a third-party service.

The live demo runs entirely in your browser: it loads our open-source JavaScript package and redacts locally, so no text you enter into it is sent to any server.

Website Analytics

To understand which pages are useful, we run Umami, an open-source analytics tool, on our own infrastructure (analytics.euredact.dev). We chose it so that visitor data stays with us: it is not Google Analytics, and no analytics provider receives your data.

  • No cookies, no fingerprinting. Nothing is stored on your device and you are not tracked across sites or across visits.
  • No IP addresses stored. Umami derives an anonymous, rotating identifier from a hash of your IP address and browser, and discards the address itself. We cannot identify you from it.
  • What we record: the page you viewed, the site that referred you, your country, and your browser and device type — all in aggregate. We also count four actions: opening and submitting the waitlist form, subscribing to the blog, and running the demo. The demo event records only how many items were detected, never the text you entered.
  • We honour Do Not Track. If your browser sends a Do Not Track signal, nothing is recorded at all.
  • Legal basis: our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR). As the data is aggregate and cannot identify you, we do not ask for consent, and there is no cookie banner.
  • Retention: aggregate statistics are kept for up to 24 months. They are never sold or shared.

Waitlist & Blog Subscription

If you join the cloud tier waitlist or subscribe to the blog, we collect the email address you submit, together with any optional information you choose to provide in the form.

  • Purpose: to notify you when the euRedact cloud tier launches, and to send blog updates if you subscribed to them. We do not use your address for any other marketing, and we do not sell or share it.
  • Legal basis: your consent (Art. 6(1)(a) GDPR), given when you submit the form. You can withdraw it at any time by emailing us, with no effect on processing carried out beforehand.
  • Processor: form submissions are handled by Formspree, Inc. (United States), which stores the submission and forwards it to us. Your email address is therefore transferred to and stored in the United States. See the Formspree Privacy Policy.
  • Retention: until the cloud tier launches and we have notified you, until you unsubscribe or ask us to delete your address, or after 24 months of inactivity — whichever comes first.

You have the right to access, rectify, erase, restrict, or port your data, and to object to processing. To exercise any of these, email us at the address below. You also have the right to lodge a complaint with your supervisory authority — in Belgium, the Data Protection Authority.

euRedact Cloud (Coming Soon)

When the cloud tier launches, a separate privacy policy will detail how text is processed, what data is retained (if any), and what safeguards are in place. A Data Processing Agreement (DPA) will be available for all cloud tier customers.

Contact

For privacy-related inquiries, contact us at contact@euredact.eu.