Privacy policy

1. Who we are

deepdig.dev is operated by Softplexity SRL, Otopeni, Romania (CIF: RO42905137; J2020001401295). For privacy questions and data-subject requests, write to contact@softplexity.com.

2. What data we collect

deepdig is a diagnostic tool — most of what we "collect" is what you explicitly submit (a domain name, an IP, an email header blob). We split the data into three buckets:

• Diagnostic input. The domain / IP / URL / email headers you paste into a tool. Stored as part of the snapshot (next bullet) so the result has a permalink.
• Snapshots. Each completed diagnostic produces a snapshot — the findings plus the input that produced them. Snapshots have public, unguessable URLs and are kept for 90 days before automatic deletion. They are not associated with your account (there are no accounts).
• Operational logs. Each request is logged with: timestamp, method, path, response status, request ID, your IP, and your user-agent. Logs are kept for 14 days and rotated.
• Analytics (only if you consent). If you click "Accept" on the consent banner, Google Tag Manager loads Google Analytics 4, which sets cookies and reports anonymized usage events to Google. If you click "Reject," no analytics scripts are loaded and no cookies are set beyond the consent decision itself (a single deepdig:consent entry in localStorage).

3. Lawful basis

• Diagnostic input + snapshots + operational logs — GDPR Art. 6(1)(f), legitimate interest in operating and securing the service.
• Analytics — GDPR Art. 6(1)(a) and PECR Art. 5(3) consent. You can withdraw consent at any time below.

4. Who can see your data

• Snapshots — anyone with the permalink. Don't paste anything you wouldn't want a stranger to see; treat the URL as the access token.
• Operational logs — only Softplexity engineers performing maintenance.
• Analytics — Google LLC, USA, as a sub-processor under Google's DPA. Data transfer to the US is governed by SCCs and the EU-US Data Privacy Framework.

5. Your rights (GDPR Art. 15–22)

You can request access, correction, deletion ("right to be forgotten"), restriction, portability, or to object to processing of your personal data. Write to contact@softplexity.com — we respond within 30 days. You can also lodge a complaint with the Romanian DPA (ANSPDCP) or your local supervisory authority.

To delete a specific snapshot, send us the snapshot permalink. To stop logging your activity entirely, don't use the service. (We can't honour "delete my IP from past logs" requests in real-time because logs are append-only — they'll fall out within 14 days regardless.)

6. Cookies & consent

deepdig sets exactly one item in your browser by default — the consent decision itself (a localStorage entry, not a cookie). If you accept analytics, Google Analytics sets additional cookies (typically _ga, _ga_*) with a 2-year lifetime.

7. Changes to this policy

Material changes are reflected in the "Last updated" date at the top. Significant changes will also be announced on the landing page.