Privacy Policy

Version of 25 September 2026.

Controller

The controller of personal data is Krzysztof Balicki, trading as Web Systems, ul. Gen. Jarosława Dąbrowskiego 249/23, 93-231 Łódź, Poland, VAT ID PL7292462454. Contact for data protection matters: biuro@web-systems.pl.

What data we process and why

Account: name, e-mail address, password (as a hash), dashboard language. Purpose: creating and running the account, providing the Service (Art. 6(1)(b) GDPR).
Service configuration: domains, hosting IP addresses, chosen proxy servers, certificates. Purpose: providing the Service (Art. 6(1)(b) GDPR).
Payments and invoices: billing details (name, address, VAT ID), payment history. Purpose: billing and tax obligations (Art. 6(1)(b) and (c) GDPR). We do not store card details; Stripe handles them.
Security: IP address at sign-up and log-in, failed log-in attempts. Purpose: protecting accounts and preventing abuse, including in the referral program (Art. 6(1)(f) GDPR).
Contact: data from the contact form and correspondence. Purpose: answering your message (Art. 6(1)(f) GDPR).
Referral program: who referred whom and the state of rewards. Purpose: running the program (Art. 6(1)(b) GDPR).

Traffic passing through the proxy servers

The proxy servers pass on the traffic of visitors to Customers’ sites. The proxy servers keep access logs: visitor IP address, time, request (URL), response code, referrer and browser identifier. The logs are used for diagnostics and abuse protection, kept for up to 10 days and then deleted automatically. For the data of visitors to Customers’ sites the Provider acts as a processor on behalf of the Customer, on the terms set out in the Terms of Service (section 11).

Who receives data

Stripe Payments Europe Ltd. (payments),
Fakturownia.pl (invoicing),
Hetzner Online GmbH (the server running this site) and the providers of proxy servers in the USA and Europe (providing the Service),
Google Ireland Ltd. (Google Tag Manager and analytics, only with consent to analytics cookies),
public authorities where the law requires.

Some providers may process data outside the European Economic Area (e.g. in the USA), based on standard contractual clauses or an adequacy decision of the European Commission.

How long we keep data

account and configuration data: until the account is deleted,
invoices and billing data: 5 years from the end of the year in which the tax obligation arose,
sign-up IP address: 90 days,
correspondence: until the matter is closed, then until claims become time-barred.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. You can withdraw cookie consent at any time in the cookie settings (“Cookies” link in the footer). You may also lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych) or the authority in your country.

Cookies

Necessary (always on): log-in session, security, language, your consent choice, the cart during purchase.
Analytics (with consent): Google Analytics via Google Tag Manager, visit statistics.
Marketing (with consent): ad measurement and remembering a referral link for 60 days.

Analytics and marketing cookies are off by default (Google Consent Mode v2). Your choice is remembered for 180 days.

Is providing data required?

Providing data is voluntary, but without account and billing details we cannot provide the paid Service.