Privacy Policy

1Who we are

Wiptor.com (“Wiptor”, “we”, “us”) operates a free Layer 7 attack‑protection service, free web hosting, this website, and support through live chat, email and tickets in the client panel. Wiptor.com is the operator of this website and service, and no part of it is charged for. For data‑protection matters we act as the operator (controller) and can be reached at contact@wiptor.com.

2What this policy covers

It applies when you visit wiptor.com, create a Wiptor account, use our hosting or protection, or talk to us through live chat, email or a support ticket in the client panel. It also explains your rights under the EU General Data Protection Regulation (GDPR) and Romanian data‑protection law.

When you put a website behind Wiptor protection or host a site with us, personal data belonging to your visitors may pass through our systems. For that data we act on your instructions as your processor. See section 4 and our Terms of Service.

3Data we collect and why

• Account data. Your name, email address, a hashed password, and any profile details you add. Purpose: to create and run your account. Basis: performance of our agreement with you (GDPR Art. 6(1)(b)).
• Service configuration and content. The domains you add, your protection settings, and, for hosting, the files and databases you upload. Purpose: to provide the service you asked for. Basis: performance of our agreement, and our legitimate interest in a secure, stable platform (Art. 6(1)(f)).
• Technical logs. When you or your visitors connect to Wiptor or to a site we host or protect, our servers record IP addresses, timestamps, requested URLs, response codes, user‑agent strings and referring pages. Purpose: to run the service, investigate faults, and detect and stop abuse. Basis: legitimate interest in security and reliability.
• Attack‑detection data. Our protection agent inspects traffic to protected sites and records source IP addresses, TLS fingerprints (JA3/JA4), connection and request patterns, and the addresses it blocks. Some of this is shared in hashed or aggregated form across the Wiptor protection network, so an attacker seen on one protected site can be recognised on another. Purpose: to detect and mitigate attacks. Basis: legitimate interest in security, ours and our users’.
• Support, tickets and live chat. If you email us, open a support ticket in the client panel, or use the chat widget, we keep your messages, any name or email you give, and the technical log data above for that session, including an approximate location derived from your IP. Purpose: to answer you and keep a record. Basis: legitimate interest in providing support, and your consent, which the chat widget asks for before you start.
• Cookies and local storage. See our Cookie Policy. We use only strictly‑necessary items. We do not use analytics or advertising cookies and we do not load third‑party trackers.

4Data we handle on your behalf

Traffic to a site you protect or host with Wiptor can contain personal data of your own visitors, such as IP addresses and form submissions. We process that data only to deliver the protection and hosting you configured. We do not use it for our own purposes, and we delete or return it when you stop using the service or ask us to. This is governed by the data‑processing terms in our Terms of Service, which you can rely on as a processing agreement.

5Who we share data with

We do not sell personal data and we never share it for advertising.

• Infrastructure. Our servers are hosted in data centres in the European Union.
• Legal disclosure. We may disclose data if a valid legal order requires it, or to protect the rights, safety or property of Wiptor, our users or the public.

We use no other processors. If that changes we will update this policy first, and where you rely on us as your processor we will notify you in advance.

6International transfers

Our infrastructure is in the European Union and we do not transfer personal data outside the EU/EEA. If this ever changes we will put an appropriate safeguard in place, such as the EU Standard Contractual Clauses, and say so here.

7How long we keep data

• Account data. While your account exists, and up to 30 days after you delete it, then removed from active systems.
• Technical and server logs. Up to 30 days, then deleted or anonymised.
• Attack‑detection data. Individual records up to 30 days. Hashed or aggregated reputation data may be kept longer, as it no longer identifies a person.
• Support and chat records. Up to 12 months after the conversation ends.
• Backups. Hosting backups, where available, are rotated and overwritten within 30 days. Free hosting may have no backups, so keep your own copies.

8Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, provide it in a portable format, and withdraw any consent you gave, without affecting what we did beforehand. Email contact@wiptor.com and we will respond within one month.

You also have the right to complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro.

9Security

Passwords are stored only as salted hashes. Traffic to Wiptor and to the panel is encrypted with TLS. System access is limited and authenticated, and our own Layer 7 protection runs in front of our services. No system is perfectly secure and we cannot guarantee absolute security.

10Children

Wiptor is not directed at children. If you are under 16, do not create an account or send us personal data.

11Changes

We may update this policy. If we make a material change we will update the date above and, for significant changes affecting registered users, notify you by email or in the panel.