Privacy Policy

Last updated: 22 October 2026

Privacy is central to what we do. This policy explains what personal data Cyberbits Labs Ltd. (“we”, “us”) collects, why, and how long we keep it. In short: we collect as little as possible, we never sell it, and client data stays in the European Union.

1. Who we are

Cyberbits Labs Ltd. is the data controller for the personal data described in this policy. For any privacy question or request, email us at contact@cyberbits.dev.

2. Information we collect

When you contact us. If you use our contact form or email us, we receive your name, email address and the content of your message. We use it only to reply to you and, if you become a client, to deliver our services.

Server logs. Like any web server, our servers (including the contact form and our hosting services) record technical information about each request, such as IP address, date and time, requested address and browser type. We use these logs only for troubleshooting, security and abuse handling. IP addresses are kept for a maximum of 14 days. Logs without IP addresses may be kept for statistical purposes. Only our system administrators can access log files.

This website. This website is hosted on GitHub Pages and delivered through Cloudflare’s network, which protects it against attacks and abuse. Both providers process technical request data, including visitors’ IP addresses, to deliver and secure the site. Requests sent through our contact form also pass through Cloudflare before reaching our servers. See the GitHub Privacy Statement and the Cloudflare Privacy Policy for details. We do not use any analytics, advertising or tracking services on this website.

Client data. When we host content or work on systems for our clients, we process that data on their behalf and only on their instructions. A data processing agreement is available on request.

3. Legal basis

We process personal data on the following grounds:

Pre-contractual steps and contract performance, to answer your enquiry and deliver the services you request.
Legitimate interests, to keep our services secure and reliable (server logs).
Legal obligations, where the law requires us to keep certain records.

4. Cookies

We do not set any cookies ourselves. Cloudflare may set strictly necessary security cookies, such as __cf_bm or cf_clearance, to tell legitimate visitors apart from bots and to protect the site against abuse. These cookies are not used for tracking or advertising, and because they are strictly necessary they do not require consent. See Cloudflare’s cookie documentation for details.

We do not sell, rent or trade personal data. We only share it:

with the service providers needed to run our services: GitHub, which hosts this website, Cloudflare, which delivers and protects it, and the network providers that connect our servers to the internet, which may keep their own connection logs;
when required by law or by a valid order from a competent authority.

6. Where your data is stored

Client data and data received through our contact form are stored exclusively in the European Union. Cloudflare and GitHub operate global networks, so requests to this website and contact form submissions in transit may be processed outside the European Union, under the safeguards described in their respective privacy policies.

7. Data security

We run our own infrastructure, apply the principle of least privilege, encrypt connections with modern TLS and keep our systems up to date. Access to personal data is restricted to the people who need it to do their job.

8. How long we keep data

Server logs with IP addresses: 14 days at most.
Enquiries: as long as needed to handle your request and any resulting engagement.
Client records: for the duration of our engagement, and afterwards only as long as required by law.

9. Your rights

Under the GDPR you have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these rights, email us at contact@cyberbits.dev. You also have the right to lodge a complaint with your local data protection authority.

10. Changes to this policy

We may update this policy from time to time. The latest version is always published on this page, with the date of the last update at the top.