Legal

Privacy Policy

Last updated: 2026. Draft document: to be reviewed before launch.

PLACEHOLDER — to be replaced before launch. The data controller is shown as "John Doe" with email info@lucerta.io: these are placeholder details. Replace them with the real company data (legal name, registered office, VAT, any DPO).

This policy describes how personal data collected through the lucerta.io website is processed, under Regulation (EU) 2016/679 ("GDPR"). This is an informational website: it does not require an account and it uses no tracking cookies.

1. Data controller

Data controller: John Doe (placeholder) — [Registered office to be added], VAT [to be added].
Privacy contact email: info@lucerta.io.

2. What data we collect

We only collect the data you voluntarily provide by filling in the forms on the site:

  • Newsletter: email address and, if you provide it, your first name.
  • Enterprise interest: name, company (optional), email and the message you write.
  • Feedback: report type, email and description.

We do not collect special categories of data (Art. 9 GDPR) and we do not carry out profiling.

To protect the forms from automated abuse we use Cloudflare Turnstile, a service that verifies the interaction comes from a person without using tracking cookies. No IP addresses are recorded for marketing purposes.

3. Purposes of the processing

  • to send you the updates you requested (newsletter);
  • to contact you about your interest in the Enterprise edition;
  • to manage and reply to your bug reports or feature proposals.

4. Legal basis

The processing is based on your consent (Art. 6(1)(a) GDPR), given through the consent checkbox on each form. For the newsletter we use double opt-in: the subscription only takes effect after you confirm by email. You can withdraw your consent at any time.

5. Data retention

We keep the data for as long as necessary for the purposes above and in any case until you withdraw your consent or ask for deletion. Deletion requests are handled without undue delay.

6. Recipients and transfers

Data may be processed by technical providers acting as data processors (e.g. hosting and email delivery platforms). If a provider processes data outside the European Economic Area, the transfer is based on appropriate safeguards under the GDPR (e.g. standard contractual clauses). We do not sell or share your data with third parties for marketing purposes.

7. Cookies and tracking technologies

This site uses no tracking cookies and no analytics tools. You won't see a cookie banner because we don't need one. The only form-verification service (Turnstile) is designed to be cookie-free.

8. Your rights

You can exercise at any time the rights set out in Arts. 15–22 GDPR: access, rectification, erasure, restriction, objection and portability. To do so, write to info@lucerta.io. You also have the right to lodge a complaint with the competent supervisory authority.

9. Changes

We may update this policy to reflect legal or service changes. The version published on this page is the current one.

See also: Licence and Legal notes.