Privacy Policy

This policy explains how Brightlogic Consulting Ltd uses personal information when you visit node0a.com or use its tools. It covers this website. Fill, Monitor and other linked websites have their own privacy information.

Who is responsible for your information?

Brightlogic Consulting Ltd is the data controller. We are registered in England and Wales, company number 14714715. Our registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

For privacy questions or requests, email support@brightlogic.uk or write to our registered office.

Information we use and why

• Providing tools: we process the information you enter to produce the result you request, such as a certificate request, QR code, pay estimate or domain check. We rely on our legitimate interests in providing the service you choose to use. Please enter only information needed for the tool.
• Temporary password sharing: we store the shared value in encrypted form, together with its expiry and remaining views. Anyone with a working link can request its contents. The value becomes unavailable when its time or view limit is reached.
• Optional analytics: Google loads on eligible pages with analytics storage denied. Before acceptance, or after decline, it can receive cookieless signals for limited statistical measurement, including connection information such as your IP address, browser details, time and page path. We rely on legitimate interests in understanding use of the website for this limited measurement. Analytics cookies and fuller measurement require your consent. We do not retain referring website hostnames in our local request log. The lawful basis is consent.
• Security and reliability: requests necessarily reveal your IP address to our hosting systems. We keep a shared request log for the admin dashboard and visitor radar, recording IP addresses, request times, browser descriptions and page paths across the website independently of analytics consent, to identify abuse. Query strings and submitted contents are excluded. We may obtain approximate location and IP reputation information for the visitor radar. This security recording does not use analytics cookies, store submitted tool contents or publish other visitor IP addresses. Session information, rate-limit records and technical logs also help us keep the website working. We rely on our legitimate interests in protecting the service and its visitors.
• Contact: if you email us, we use your contact details and message to answer your request, relying on our legitimate interests in responding to you. We may retain information where a legal obligation requires it.

We do not intentionally store the contents of ordinary tool submissions after processing, apart from the encrypted temporary sharing service. The password/key workspace uses Google Analytics for page visits, without including generated passwords or keys in our analytics events. Google Analytics is disabled on password-sharing pages, CSR pages, QR pages and these legal pages. We do not send shared secrets or private keys to Google Analytics.

External services

Google AdSense is loaded across public website pages. Advert placement depends on our AdSense settings and page exclusions. Google and its advertising partners may use cookies, device identifiers and visit information to deliver, measure and personalise adverts according to your choices. Optional storage and personalised advertising require the applicable consent. Your analytics choice does not authorise advertising. Use Privacy and cookie settings on those pages, or Ad privacy settings, to reopen Google's message and change your choices. The message identifies the participating partners and their purposes.

Some tools need an external service to provide their result:

• Google provides optional website analytics.
• IPinfo receives your IP address when you request IP location details.
• IP2Location and AbuseIPDB receive public visitor IP addresses for approximate location and reputation information used in security monitoring. Results are cached to reduce repeated requests.
• Pulsedive receives the domain, IP address or URL you submit for a threat check. It may retain submitted indicators and make them available through its threat-intelligence services. Active probing may also contact the destination you submit. Avoid submitting private URLs or identifiers, and only check systems you have permission to investigate. See Pulsedive's Privacy Policy.
• DNS infrastructure processes domain lookups. Hosting and technical suppliers process information needed to deliver and protect the website. Your browser also requests styles, icons and fonts from jsDelivr, Cloudflare's cdnjs and Google Fonts; those services receive connection information such as your IP address.

International transfers

Do not enter another person's sensitive information into these tools. We do not sell your personal information. We may disclose information where required by law or necessary to establish, exercise or defend legal rights.

Google and some tool providers may process information outside the UK, including in the United States. UK data protection law requires an applicable adequacy arrangement or appropriate safeguards for restricted transfers. Contact us for information about the locations and safeguards applicable to a particular service.

See Google's Privacy Policy and how Google uses information from websites for details of Google's processing.

Cookies and your choices

Analytics cookies are off until you choose to accept. Google can receive limited cookieless signals while consent is denied. Accepting is optional. Declining, closing the prompt or leaving it unanswered does not prevent you from using the tools. Advertising permissions are separate from analytics and default to denied. Only Google's privacy message can authorise advertising cookies, data for advertising measurement and personalised advertising. Google's privacy message manages analytics and advertising choices across public pages. Previously saved Node0a preferences do not override that message.

Use Ad privacy settings or Privacy and cookie settings in the footer to withdraw or change your choices in Google's message at any time. Withdrawing permission updates the corresponding Google consent signal to denied. Google's message manages withdrawal and provider choices. We cannot remove cookies belonging to other domains. Google can continue receiving limited cookieless signals. Withdrawal does not automatically erase information already collected; contact us about a deletion request. If your browser blocks preference storage, optional storage remains denied and we may be unable to remember your choice.

How long we keep information

• The shared local request history is limited to the most recent 30 days and 10,000 requests. Cached location and reputation results are kept for up to 30 days and 10,000 addresses. Expired records are removed by scheduled housekeeping.
• Shared values expire after the selected time, up to seven days, or when the view limit is used. Expired encrypted records are removed by scheduled housekeeping.
• Rate-limit records last for their applicable limit window and are removed after expiry. Security/session records and hosting logs are retained for the time needed to operate the service, investigate problems or meet legal obligations.
• Google's retention depends on the type of analytics information and the settings of our Analytics account. Google's information above explains its processing. You can ask us about the period applicable to your request.
• Correspondence is retained as needed to handle your request, resolve disputes and meet applicable legal obligations. Backup copies follow the relevant backup retention cycle.

Your rights

Depending on the circumstances, you can ask for access to your information, correction, deletion, restriction or portability, and object to processing based on legitimate interests. You can withdraw your optional consent at any time without affecting the lawfulness of processing before withdrawal. We may need information to verify your identity or locate the relevant record.

You can complain to the Information Commissioner's Office. You do not have to contact us first, although we welcome the opportunity to address your concern.

Other information

Node0a does not use your information to make decisions with legal or similarly significant effects on you. The tools are not directed at children. We may update this policy when our services or practices change; the date above identifies the current version.