Privacy Policy

ClashCloud ("we," "us," or "our") operates the website clashcloud.dev and provides open-source infrastructure tools. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and Dutch law.

1. Information We Collect

We collect minimal personal data necessary to operate our services:

• Account Information: When you register, we collect your name, email address, and a securely hashed password.
• Communication Data: When you contact us via our feedback form, we collect your name, email address, the selected topic, and your message.
• Technical Data: Our infrastructure automatically collects standard server logs (IP address, browser type, timestamp) for security and DDoS protection purposes via Cloudflare and Hetzner.

2. How We Use Your Information

We process your data for the following purposes:

• To provide, maintain, and secure our services and user accounts.
• To respond to your inquiries and support requests.
• To monitor system performance and prevent abuse.
• To comply with legal obligations under Dutch and EU law.

3. Data Sharing and Third Parties

We do not sell your personal data. We only share it with trusted service providers essential for our operations:

• Hetzner (Germany/EU): Server hosting and data storage.
• Cloudflare (Global): CDN and DDoS protection.
• Resend (US): Transactional email delivery. (Governed by standard contractual clauses approved by the European Commission).

4. Data Retention

We retain account data for as long as your account is active. Feedback messages are retained for up to 2 years for administrative purposes. Server logs are automatically rotated and deleted after 30 days.

5. Your Rights

Under GDPR, you have the right to request access to, correction of, or deletion of your personal data. To exercise these rights, please contact us at [email protected]. We will respond within 30 days.

6. Security

We implement industry-standard security measures, including encryption in transit (TLS), hashed passwords, and strict access controls to protect your data.