Legal

Privacy Policy

As of: May 2026

1. Overview

This page explains what happens to your personal data when you use this website. We treat your personal data confidentially and in accordance with applicable data-protection law — including the EU General Data Protection Regulation (GDPR, Regulation 2016/679) where it applies extraterritorially under Art. 3(2) GDPR, and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) as the operator's home jurisdiction.

Personal data means any information that can identify you (e.g. name, email address, IP address). The simulator itself runs entirely in your browser and does not send anything back to us; this policy describes only the public marketing site.

2. Data controller

The controller responsible for the processing of personal data on this website is:

3. What we collect and why

Server log files

The hosting provider automatically records the following information for every request, in standard server log files:

• Browser type and version
• Operating system
• Referrer URL
• Hostname of the requesting machine
• Time of the request
• IP address

These logs are not merged with other data sources. They are used only to operate, secure and debug the site.

Lawful basis: Art. 6(1)(f) GDPR — legitimate interest in the technically reliable presentation and security of our website.

Email contact

If you contact us by email, your message — including your email address and any personal information you choose to include — is stored and processed for the purpose of replying to your enquiry. We do not share this data with third parties without your consent.

Lawful basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient correspondence).

Contact form

If you use a contact form on this site, the data you submit (name, email address, message) is sent to us by email and stored for the purpose of handling your request. It is not shared with third parties.

To prevent abuse (spam, brute force), your IP address is stored on the server in hashed form for at most 10 minutes (rate-limiting) and then automatically discarded.

Lawful basis: Art. 6(1)(b) and (f) GDPR.

Cookies and local storage

This website uses no cookies. No first-party or third-party cookies are set.

We use a self-hosted, cookie-free analytics script served from stats.webersheim.de to understand basic website usage, such as visited pages, referrers, browser type and approximate geography. The analytics setup does not use cookies and is used only to improve the website.

Your browser's localStorage is used to remember your language preference (key: netverdict-locale). This stays on your device and is not transmitted anywhere. You can clear it at any time via your browser settings.

Lawful basis: Art. 6(1)(f) GDPR — legitimate interest in understanding and improving website usage, and in presenting the site in the user's preferred language.

4. Hosting and external services

Hosting

This website is served from infrastructure operated by the data controller. When you access the site, technical metadata (e.g. IP address) is processed by the hosting layer to deliver the requested content.

Lawful basis: Art. 6(1)(f) GDPR — legitimate interest in reliable delivery of our website.

Self-hosted fonts

Fonts are served locally from this domain. No external font services (e.g. Google Fonts) are contacted; no data is transmitted to third parties when fonts load.

GitHub

The NetVerdict source code is hosted on GitHub. If you follow a link to the GitHub repository, GitHub's own privacy terms apply: GitHub Privacy Statement.

5. The NetVerdict simulator

The simulator itself — both the web build under /app/ and the Chrome extension — runs entirely in the user's browser. There is no communication with netverdict.io servers or any third party. Topologies, configurations and packet traces never leave the user's device.

No simulator telemetry, topology data, configurations, packet traces or crash reports are collected.

6. International transfers

The data controller is established in Canada. Canada has been recognised by the European Commission as providing an adequate level of data protection for commercial organisations subject to PIPEDA (Commission Decision 2002/2/EC), so transfers of personal data from the EEA to the controller take place under that adequacy framework.

7. Retention

Where this policy does not specify a more specific retention period, your personal data stays with us only as long as the purpose for which it was collected requires. If you submit a valid deletion request, or withdraw consent that we relied on, your data is deleted unless we have another lawful ground to retain it; in that case the data is deleted once that ground falls away.

8. Your rights

Subject to the conditions in applicable data-protection law, you have the right to:

• obtain confirmation of, and access to, the personal data we hold about you (Art. 15 GDPR; PIPEDA Principle 9);
• request rectification of inaccurate data (Art. 16 GDPR);
• request erasure of your data (Art. 17 GDPR — "right to be forgotten");
• request restriction of processing (Art. 18 GDPR);
• receive your data in a portable, machine-readable format (Art. 20 GDPR);
• object to processing based on legitimate interests (Art. 21 GDPR);
• withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR);
• lodge a complaint with a supervisory authority (Art. 77 GDPR for the EEA; the Office of the Privacy Commissioner of Canada for PIPEDA).

To exercise any of these rights, please contact us at hello@netverdict.io.

9. Security

This site is delivered over TLS. You can recognise an encrypted connection by the https:// prefix in the address bar and the lock symbol shown by your browser. Note that no transmission over the public Internet is ever absolutely secure; complete protection of data against third-party access cannot be guaranteed.

10. Changes to this policy

We may update this privacy policy from time to time so that it continues to reflect current legal requirements or changes to our services. The version published on this page applies to your visit.