Privacy policy
This policy explains what personal data we process when you visit gadnet.pl, when you write to us, and when your GADNET router checks for updates. What the router does inside your network stays on the router; every connection it makes on its own is listed in the FAQ ("Is my data stored in the cloud?").
Data controller
The data controller is Michał Maciak, a private individual running GADNET as a personal project. For any data-protection matter, write to [email protected].
The gadnet.pl website
The website uses no cookies, no analytics and no advertising trackers. Fonts and icons are served from gadnet.pl itself — browsing the site does not connect you to any other service. The site is served by Cloudflare Pages (Cloudflare, Inc.), which processes the technical data of each request — IP address, browser information (user agent), requested path and time — to deliver the site and protect it from abuse. Cloudflare keeps this data under its standard policies; we run no analytics and no logging of our own.
Contact, beta applications and release announcements
There are no forms on the site — contact is by email only. If you write to [email protected] (including to apply for the closed beta), we process your email address and the contents of your message in order to reply. We send release announcements only if you ask for them and confirm in a separate email; one reply is enough to unsubscribe.
The router and updates.gadnet.pl
When update checking is on (the default), the router contacts updates.gadnet.pl every few hours. The request carries a device certificate that includes the device hardware serial number, and the server sees the public IP address of your connection. This data is used only to deliver signed updates to genuine GADNET routers and to protect the server from abuse; it is not combined with data about your network, because the router does not send any. By default, security updates install automatically and the router restarts at night; you can switch off automatic installation, the restart, or update checking altogether in the admin panel's Settings. Remote access is off by default. When enabled, the router registers with a device certificate and connects out to the GADNET relay. Tunnel content is encrypted between the app and router; the service processes router identity and technical connection metadata, including IP addresses and channel identifiers, to provide access and prevent abuse. The router can also download compatible GADNET Browser installers and serve them locally.
Legal basis
Replying to your message and handling beta applications — Art. 6(1)(f) GDPR (our legitimate interest in answering questions about the project). Release announcements — Art. 6(1)(a) GDPR (your consent). Technical request data for the website and the router's update checks — Art. 6(1)(f) GDPR (delivering the site and the updates securely).
Recipients
Cloudflare, Inc. — hosting and delivery of the website (processor); the email provider that hosts the [email protected] mailbox; the server provider that hosts updates.gadnet.pl. We do not sell data or share it for marketing.
Transfers outside the EEA
Cloudflare, Inc. is based in the USA. Transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework, in which Cloudflare participates.
How long we keep data
Correspondence: 12 months after the last exchange, then deleted. Release-announcement list: until you unsubscribe or withdraw consent. Technical request data for the website: under Cloudflare's standard policies. Update-check data: only as long as needed to run and protect the update server.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You can withdraw your consent to release announcements at any time; this does not affect the lawfulness of processing before the withdrawal. Write to [email protected] — we will respond within 30 days. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the authority where you live.
Voluntary data and automated decisions
Giving us your data is voluntary, but without an email address we cannot reply. We make no decisions based solely on automated processing, including profiling.
Changes to this policy
Material changes will be announced on the site front page at least 14 days before they take effect.