Ce contenu n’est pas encore disponible dans votre langue.
Privacy Policy
TL;DR:
At Altcha.org, we prioritize your privacy and data protection.
For visitors to our websites, we do not use marketing or tracking cookies or fingerprinting. We collect only the information necessary to operate, secure, and improve our websites and services.
When you create an account or subscribe to our services, we collect only the information necessary to provide the relevant service, manage your account, process payments, communicate with you, and protect our services.
Our Cloud service is designed to protect websites without collecting or retaining personal data about their end users. When a customer uses the Cloud service on their website, data submitted by the customer’s end users is processed only as necessary to provide the requested protection service. We do not use such end-user data for advertising, profiling, or unrelated purposes, and we do not sell it.
We comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws. This policy explains what information we collect, why we collect it, how we use it, how long we retain it, and your rights regarding your personal data.
This Privacy Policy describes how Altcha.org and related websites and services (“we,” “us,” or “our”) collect, use, disclose, and otherwise process personal information. We are committed to protecting privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).
For the purposes of this Privacy Policy, “end-user data” means information submitted to or processed by our services on behalf of a customer through the customer’s website or application. This may include information provided by individuals interacting with a customer’s website.
1. Information We Collect
Account and Customer Information
When you register for an account or use our API or other customer services, we may collect:
- Name
- Email address
- Account and authentication information
- Billing and subscription information
- Information you provide when contacting us or requesting support
We collect only the information reasonably necessary to provide and manage the relevant service.
Where payments are processed by our payment provider, payment card details may be collected and processed directly by that provider. We do not generally receive or store full payment card numbers.
Cloud Service End-User Data
Our Cloud service is designed to provide website protection without collecting or retaining personal data about the end users of our customers’ websites.
When an end user interacts with a website using our Cloud service, data may be transmitted to and processed by the Cloud service only as technically necessary to provide the requested protection functionality. We do not use this end-user data for advertising, profiling, or unrelated purposes, and we do not sell it.
The Cloud service is designed so that end-user data is not retained after it is no longer necessary to provide the requested service, except where temporary processing or limited technical data is necessary for security, reliability, abuse prevention, or operation of the service.
Customers are responsible for ensuring that their own use of the Cloud service and their websites comply with applicable privacy and data protection laws.
2. Use of Cookies and Similar Technologies
We do not use marketing or tracking cookies or browser fingerprinting for advertising or cross-site tracking.
We may use strictly necessary technologies required to operate, secure, and provide our websites and services.
3. Legal Basis for Processing
Where GDPR applies, we process personal data on the following legal bases:
- Contractual necessity: To provide our services, manage accounts, and fulfill our contractual obligations.
- Legal obligations: To comply with applicable laws, regulations, and legally binding requests.
- Legitimate interests: To secure, maintain, improve, and protect our services, prevent fraud and abuse, and ensure the reliability of our systems, provided that these interests do not override your rights and freedoms.
- Consent: Where consent is required by applicable law and we rely on consent for a particular processing activity.
4. How We Use Your Information
We may use personal information to:
- Provide and operate our services
- Create and manage customer accounts
- Manage subscriptions and billing
- Provide customer support
- Communicate with you about your account, transactions, security, and material service updates
- Maintain the security, reliability, and integrity of our services
- Prevent fraud, abuse, and unauthorized use
- Comply with legal obligations
- Improve our services, where permitted by applicable law
We do not sell personal information.
5. Cloud Service and End-User Data
The Cloud service allows customers to use Altcha.org protection functionality on their own websites and applications.
When an end user interacts with a customer’s website, the Cloud service may process information sent to it as part of the protection request. This processing is limited to what is necessary to provide the requested service.
We do not collect or retain personal data about end users for our own purposes. We do not sell end-user data, use it for advertising, or use it to create profiles of end users.
We do not use end-user data for purposes unrelated to providing, securing, and operating the Cloud service.
Where technically necessary, limited technical information may be processed temporarily for purposes such as security, abuse prevention, service reliability, and troubleshooting. Such information is not used for advertising or unrelated profiling.
6. Sharing Your Information
We share personal information only where necessary to provide, secure, operate, or improve our services, comply with legal obligations, or protect our rights.
- Payment Provider: Paddle.com processes payments and related billing information on our behalf. Please refer to Paddle’s privacy policy for information about its processing of personal data.
- Service Providers: We may use infrastructure and service providers, including Amazon Web Services (AWS), for hosting, infrastructure, email delivery, security, and other necessary service operations. These providers process data only as necessary to provide services to us and under appropriate contractual and security safeguards.
- Legal Obligations: We may disclose information where required by applicable law, regulation, court order, or a valid request from a competent governmental or law enforcement authority.
- Protection of Rights and Security: We may disclose information where reasonably necessary to detect, prevent, or address fraud, abuse, security incidents, or other harm.
We do not sell personal information or end-user data.
7. Data Retention
We retain account and customer information only for as long as reasonably necessary to provide our services, fulfill the purposes described in this Privacy Policy, resolve disputes, enforce agreements, maintain appropriate business and security records, or comply with legal obligations.
For services that do not require data storage, including services designed to process requests without retaining submitted content, we do not intentionally retain the submitted content after it is no longer necessary to provide the service.
The Cloud service is designed not to retain end-user data after processing is complete, except for limited technical data that may be temporarily processed or retained where necessary for security, abuse prevention, reliability, or operation of the service.
We do not intentionally log or store the contents of requests to services that are designed not to retain submitted data. Limited technical logs may be generated where necessary to operate and secure our services.
8. Your Rights
Where GDPR applies, you may have the following rights regarding your personal data:
- Right of access: Request access to your personal data.
- Right to rectification: Request correction of inaccurate or incomplete personal data.
- Right to erasure: Request deletion of your personal data, subject to applicable legal exceptions.
- Right to restriction of processing: Request that we limit the processing of your personal data in certain circumstances.
- Right to data portability: Request a copy of certain personal data in a structured, commonly used, and machine-readable format.
- Right to object: Object to processing based on our legitimate interests in certain circumstances.
- Right to withdraw consent: Where processing is based on consent, withdraw consent at any time.
To exercise these rights, please contact us using the information provided in Section 13. We will respond within the period required by applicable law. Under the GDPR, this is generally within one month, subject to applicable extensions for complex or numerous requests.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
9. Data Security
We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, destruction, or other unlawful processing.
These measures may include:
- Encryption of data during transmission and at rest, where appropriate
- Access controls and authentication mechanisms
- Monitoring and security controls
- Regular security reviews and risk assessments
- Employee and contractor confidentiality and data protection obligations
- Measures designed to maintain the availability and integrity of our services
10. International Data Transfers
We apply different data-location rules depending on the type of data and service involved.
Cloud Service End-User Data
For customers using our Cloud service, end-user data processed by the Cloud service is hosted and processed exclusively within the European Union. We do not transfer Cloud service end-user data outside the European Union for hosting or processing.
We do not transfer Cloud service end-user data outside the European Union for hosting or processing. This EU-only data residency commitment applies to data processed by the Cloud service on behalf of our customers.
Account, Billing, and Customer Data
Account, billing, and other customer data may be processed by third-party service providers located outside the European Union where necessary to provide our services.
For example, payment and billing information may be processed by our payment provider, Paddle.com, in accordance with its own privacy policy and applicable data protection requirements. We do not generally receive or store full payment card numbers.
Where personal data is transferred outside the European Economic Area or the European Union, we use appropriate safeguards required by applicable data protection law, such as an adequacy decision, Standard Contractual Clauses, or another legally recognized transfer mechanism.
The location and transfer practices of third-party service providers may be subject to their own privacy policies and data protection terms.
11. Data Breach Notification
If we become aware of a personal data breach, we will assess the breach and take the actions required by applicable law.
Where required by the GDPR, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of a breach that is required to be notified.
Where required by law, we will also notify affected individuals without undue delay.
12. Children’s Privacy
Our services are not intended for individuals under the age of 16 unless otherwise stated.
We do not knowingly collect personal information directly from children under the applicable minimum age without an appropriate legal basis or required parental authorization.
If we become aware that we have collected personal information from a child in circumstances where collection was not permitted, we will take reasonable steps to delete it.
13. Contact Us
The legal operator of the website and related services:
BAU Software s.r.o.
Lidicka 700/19, 602 00 Brno, Czechia, EU
If you have questions or concerns about this Privacy Policy or the handling of your personal information, please contact us at:
Email:
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements, or privacy practices.
The updated version will be published on this page. If we make material changes, we may provide additional notice where required by applicable law.
Last Updated: 21/07/2026
Copyright © 2024 Altcha.org - Dedicated to Privacy.
ALTCHA ® is a trademark registered in EU.
Do you like ALTCHA?
Support us by giving us a star on GitHub!
OSS hosted on GitHub • Website made with Astro Starlight.