Privacy notice

Who handles your information

The operator is Derin Durak, operating as Calpardo. Contact derin@calpardo.com for privacy requests.

Hosting and email service providers: IONOS VPS; self-managed website, database and email.

Information and purpose

The form asks for your email address, project stage and a short description of what you need to test or debug. Name, organization, pilot interest, current tools and approximate timing are optional. Please do not include confidential information.

We record the submission time, notice version and internal inquiry status. Submitting requests product-related follow-up; it does not sign you up for unrelated marketing or verify ownership of an email address. Duplicate inquiries do not replace previously submitted details.

Storage, access and notifications

Inquiries are stored in a database. Access is limited to authorized operators through a private, MFA-protected workspace or host-level tools. Private review notes, contact status and contact preferences may be recorded. When owner email notifications are enabled, submitted form information may also be copied to the operator's mailbox through the configured email service. No automatic email is sent to the submitted address. We do not sell inquiry information or use advertising trackers.

Operational logs record request status and timing without form contents. The hosting edge may separately record IP addresses and request metadata. Abuse prevention uses short-lived keyed network identifiers; these are pseudonymous security data, not anonymous data.

Retention

The proposed inquiry retention period is 12 months after submission or last meaningful contact. Security identifiers expire within about one day. Operational logs are intended to be retained for 7–14 days where practical. Encrypted rotating backups, when configured, have a target retention of 30 days. Email copies are handled separately from the database and must also be removed when applying retention or deletion requests.

Deleted records may remain in aging backups until those backups expire. If a backup is restored, deletion requests must be reconciled before contact resumes. Encryption of backups does not establish encryption of the live database disk.

Your choices

Email derin@calpardo.com to request correction, export, deletion, or an end to contact. We may need enough information to verify the request before disclosing or changing a record. You can also contact Calpardo directly without using the form.

Website behavior

The private owner workspace uses essential session and authenticator-challenge cookies. There is no public account system, advertising tracking, payment processing, or external embedding. Form values are not stored in browser storage or placed in URLs. Security controls reduce risk but cannot guarantee that every incident will be prevented.

Aggregate website activity

When separately enabled after privacy review, first-party analytics counts recorded public page views and known interest-link clicks by day, page and coarse referring-source group. It does not retain full referring URLs, query strings, IP addresses, browser identifiers or individual browsing histories. It honors Global Privacy Control and Do Not Track signals and excludes private pages and admin-cookie visits. Collection is currently disabled.

Short-lived event identifiers prevent duplicate counts for up to one day. Aggregate counts are retained for up to 13 months. Separate, pseudonymous security rate limits protect the endpoint. Recorded activity is incomplete and is not a count of unique people.

Administrative security records

Private administrative actions generate restricted audit records containing an actor ID, action, target ID, outcome and time. These are retained for up to 90 days and do not contain submitted message contents, passwords or authenticator secrets. Sessions expire after eight hours, with a 30-minute inactivity limit for administrative access.