Legal
Privacy policy
Last updated: 14 October 2026
This policy explains how personal data is handled on systemflare.com. We collect very little, and we say exactly what below.
Who is responsible
The controller is Dowell LLC, a company registered in Florida, USA, trading as SystemFlare. Contact for any privacy question: hello@systemflare.com.
What we collect and why
Contact form and emails
When you use the contact form, we receive:
- your name;
- your company;
- your email address;
- your phone number, if you choose to give it;
- what you need, your timeline and your message;
- the page from which you sent the form.
The form is sent by email to our team through our own mail server. We use this data only to answer your request and, if you become a client, to prepare and perform the contract.
Legal basis (GDPR): steps taken at your request before entering into a contract (Art. 6(1)(b)) and our legitimate interest in answering enquiries (Art. 6(1)(f)). The same applies when you email us directly.
Server logs
Like every web server, ours records technical data for each request: IP address, user agent (browser and system), the page requested, the date and time. We use these logs only to keep the site secure and working, for example to detect attacks and errors.
Legal basis: our legitimate interest in the security of the site (Art. 6(1)(f)).
Analytics
We use Umami, an analytics tool that we host ourselves. It does not use cookies, does not store IP addresses and does not collect personal data. It counts page views, referrers, device types and similar aggregated figures, so we can see which pages are useful. It respects your browser’s “Do Not Track” setting. No data goes to Google, advertising networks or other third parties.
What we do not do
- We do not use cookies or similar tracking technologies. See the cookie policy.
- We do not sell, rent or share your personal data for marketing.
- We do not build profiles or make automated decisions about you.
How long we keep it
- Contact requests: only as long as needed to handle your request and any resulting contract. If you do not become a client, we delete your details within 24 months at the latest.
- Client data: for the duration of the contract and afterwards only as long as the law requires us to keep records.
- Server logs: up to 30 days, then deleted.
- Analytics: aggregated figures without personal data, kept as long as useful.
Who processes the data
- Hosting: our servers are hosted by Hetzner in the EU (Germany and Finland). Hetzner acts as our processor.
- Our team: our engineers work remotely. Dowell LLC is a US company, so people in our team may access your message from outside the European Economic Area, only to answer it.
We do not use other third-party services to process the data collected through this site.
Your rights
If the GDPR applies to you, you have the right to:
- access the personal data we hold about you;
- rectify inaccurate data;
- erase your data;
- restrict how we process it;
- receive it in a portable format (portability);
- object to processing based on our legitimate interest.
To exercise any of these rights, write to hello@systemflare.com. We answer within one month.
You also have the right to lodge a complaint with a supervisory authority, for example the Spanish Data Protection Agency (AEPD, www.aepd.es) or the authority in the country where you live or work.
Security
We protect the data we hold with the same controls we apply for clients: least-privilege access, key-only server access, encrypted backups and no secrets in email or chat. See Security & trust.
Changes
If we change this policy, we update the date at the top of this page.