What we see, and what we deliberately do not.

1. Who is responsible

NodeOps Security OÜ, an Estonian private limited company. The registration details are on the legal notice. For anything about this page or about your data, write to info@nodeops-sec.tech.

2. What this website collects

Only what you type into the contact form - your name, your email address, the subject you pick and your message - plus the ordinary server log every website keeps: the address you connected from, the time, the page and your browser’s description of itself.

No cookies. No analytics. No fonts, scripts or images loaded from anywhere else. No social media buttons. Because nothing is stored on your device and no third party is involved, there is no consent banner to click away.

If you would rather encrypt what you send us, our OpenPGP keys are published on the business site’s contact page, and we will reply the same way.

3. What a job involves

This is the part worth reading slowly, because it is the part that is actually about your home.

What we look at. The router and its settings. Which devices are connected and what kind of thing each one is. How the Wi-Fi is configured. Where DNS goes. On a device we are asked to clean or check: what software is installed, what runs at startup, and what has been changed.

What we do not look at. The content of anybody’s messages, photographs, documents or browsing history. We have no reason to and we do not want to. If a job genuinely cannot be done without opening a file - recovering a backup, for instance - we ask first, and the person whose file it is decides.

A note about other people in the house. Everyone whose devices are in scope should know we are there. We will not set up monitoring of an adult without their knowledge, and parental controls are configured with the child told about them. This is not a formality: a household where one person is watching another through the network is a situation we are not willing to help create.

4. What we write down, and for how long

• Enquiries that go nowhere - deleted within 12 months.
• Work we did for you - the written summary, the settings changed and the invoice, kept for as long as Estonian accounting law requires.
• Passwords - we do not keep them. They are written down for you, and any copy on our side is destroyed when the job closes.
• Server logs - kept by our hosting provider for its standard period, usually a few weeks.

5. Why we are allowed to

• Answering you - Article 6(1)(b) GDPR, steps taken at your request before a contract; and your consent under Article 6(1)(a).
• Doing the work - Article 6(1)(b) GDPR, performance of the contract you agreed to.
• Keeping the website up - Article 6(1)(f), our legitimate interest in a site that works and is not abused.
• Accounting records - Article 6(1)(c), because the law requires them.

6. Who else sees any of it

We do not sell personal data and we do not share it for marketing. It reaches only our hosting provider, our email provider, and - where the law compels us - an authority or a professional adviser.

Our website is hosted by Namecheap, Inc. (United States), on servers located in Europe. Our mailboxes are provided by Proton AG (Switzerland). A data processing agreement is in place with each. The dedicated server we work from is rented from OneProvider (Canada) and stands in a datacenter in France.

7. Your rights

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to us holding it, or ask for it in a portable form. Write to info@nodeops-sec.tech and we will answer within a month. If we get it wrong you can complain to the Estonian Data Protection Inspectorate, or to the authority in the country you live in.