Privacy Policy
Last updated: August 29, 2026
This policy describes the data that WyndPath ("we") processes when you use the wyndpath.com website, the console and the API. We comply with the General Data Protection Regulation (GDPR). For any question: [email protected].
1. Data we process
- Account: email address, first name, last name, company (optional), password (stored hashed, never in plain text).
- Authentication: one-time codes (OTP) sent by email, and a device identifier stored via cookie to limit abuse.
- Service usage: technical logs of requests made through the API and the test bench (target domain, status, timestamp, credits consumed), for the purposes of providing the service, billing and security.
- Audience measurement: anonymized browsing statistics on the public pages.
2. Purposes and legal bases
- Provide the console and the API, manage your account: performance of the contract.
- Secure access (anti-bot, rate limiting, logs): legitimate interest.
- Measure audience and improve the site: legitimate interest / consent depending on the context.
- Send you service-related emails (OTP, alerts): performance of the contract.
3. Cookies and local storage
- Session: cookie required for the login to work.
- Preferences: your theme (light/dark) is stored locally in your browser.
- Device identifier: security cookie against abuse.
- Audience measurement: cookies set by Google Analytics (see below).
4. Providers and recipients
We do not sell any data. We rely on subprocessors to run the service:
- Hetzner (hosting, Germany / European Union).
- Cloudflare (content delivery network, security and Turnstile anti-bot protection).
- Brevo (sending of transactional emails).
- Google Analytics (audience measurement of the public site).
5. Anti-bot protection (Cloudflare Turnstile)
Our forms (login, sign-up, forgotten password, test bench) are protected by Cloudflare Turnstile, which silently verifies that you are a human visitor, without asking you to solve a puzzle. This processing is carried out by Cloudflare and governed by the Cloudflare Turnstile Privacy Addendum.
6. Retention period
Account data is kept for as long as the account is active. Technical logs are kept for a limited period necessary for security and billing. When the account is deleted, personal data is erased or anonymized.
7. Your rights
You have a right of access, rectification, erasure, restriction, objection and portability over your data. To exercise them, write to [email protected]. You may also lodge a complaint with the CNIL (the French data protection authority).
8. Contact
For any question about this policy: [email protected].