Legal

Privacy policy

Last updated: 25 September 2026

This policy covers the website privacyfence.eu and the download service at downloads.privacyfence.eu, and nothing else.

Who is responsible, and for what

Andras Takacs, Budapest, Hungary. Email: [email protected]. PrivacyFence is a non-commercial open-source project run by a private person; there is no company behind it and no data protection officer.

That responsibility covers only what this website and the download service do with data about their visitors, as described below: hosting, download counts, analytics (only with your consent) and email you send us.

The PrivacyFence software is not covered

We do not operate the PrivacyFence software for you and never receive the data it processes. You, or your organization, install and run it on your own computer or your own server. It sends nothing to the project: no emails, files, messages, approvals, audit records, usage statistics or crash reports, because there is no PrivacyFence server to send them to. Its only connections are to the AI assistant and the services you connect it to (such as Google, Slack, Salesforce, Atlassian or Telegram, and in an organization deployment your identity provider), and to GitHub's public API to check for a newer release.

Whoever runs the software, you or your organization, is therefore responsible for the personal data it processes. The same holds for the AI assistant you connect it to, which is governed by that assistant's provider's own terms and privacy policy. The software is provided under the Apache License 2.0, "as is", without warranty of any kind; see the license for the full terms.

In short

• The site works without cookies. Nothing is stored on your device until you make a choice in the cookie banner, and only your choice itself is stored.
• Google Analytics runs only if you click Accept. If you decline, or ignore the banner, no request goes to Google.
• Downloads are counted by version, platform and day only: no IP address, cookie or browser details.
• The site is hosted on GitHub Pages behind Cloudflare. Both process your IP address to deliver the pages.

Hosting: GitHub Pages and Cloudflare

The pages are served by GitHub Pages (GitHub, Inc.) through Cloudflare (Cloudflare, Inc.), which acts as a content delivery network and protects the site against attacks. To deliver a page, both receive the technical data every web request carries: your IP address, the requested address, the time, and your browser's request headers (such as its user agent and language). GitHub logs visitor IP addresses for security purposes. Neither is given anything else by this site, and Cloudflare's own web analytics are switched off for it.

Legal basis: legitimate interest in delivering a secure website (Art. 6(1)(f) GDPR). Both companies may process data in the United States; both are certified under the EU–US Data Privacy Framework. See the GitHub privacy statement and the Cloudflare privacy policy.

Downloads and download counts

Installers are served by downloads.privacyfence.eu, a small service run on Cloudflare (Workers, R2 storage and a D1 database). The download page also asks it for the list of current releases, and the homepage and download page for the total number of downloads. When you download an installer, it adds one to a counter, and that counter is all it stores:

No IP address, user agent, cookie, fingerprint or any other identifier is stored with the count, so the counts cannot be linked to you. Cloudflare processes the request itself as described under hosting. Legal basis: legitimate interest in knowing how often the software is downloaded (Art. 6(1)(f) GDPR).

Google Analytics (only with your consent)

If you click Accept in the cookie banner, the site loads Google Analytics 4 to see how many people visit, which pages they read and where they came from. Until you accept, the Google Analytics code is not loaded at all and no request goes to Google.

Once you accept, Google Analytics collects:

• the pages you view, the page that referred you, and the time of your visit;
• your browser, operating system, device type, screen size and language;
• your approximate location (country and city), which Google derives from your IP address. Google Analytics 4 does not store IP addresses;
• interactions on the page: scrolling, clicks on links to other sites, file downloads, and which platform's download button you click;
• the section of the site a page belongs to (for example, download or documentation).

It sets two cookies on privacyfence.eu:

The property is set up to collect as little as possible: data is kept for 2 months; Google Signals, advertising personalization and data sharing with Google are switched off; and no user ID or other personal identifier is sent.

Google Ireland Limited processes the data on our behalf. Data may be transferred to Google LLC in the United States, which is certified under the EU–US Data Privacy Framework. See Google's privacy policy and how Google uses data from its business products.

Legal basis: your consent (Art. 6(1)(a) GDPR, and Art. 5(3) of the ePrivacy Directive for the cookies). You can withdraw it at any time: choose Cookie settings at the bottom of any page and click Decline. That stops Google Analytics on this site and deletes its cookies. Withdrawing does not affect what was collected before.

Your cookie choice

Your answer to the banner is kept in your browser's local storage under the name pf-analytics-consent, so the banner does not reappear on every page. It is never sent anywhere and stays until you change it or clear your browser's site data.

When you contact us

If you email [email protected], your address and message are used to answer you and kept only as long as the conversation needs. Legal basis: legitimate interest in answering (Art. 6(1)(f) GDPR). Issues and discussions on GitHub are covered by GitHub's own privacy statement.

Your rights

You have the right to access, correct and delete your personal data, to restrict or object to its processing, and to data portability, as far as the GDPR provides. Write to [email protected]. For the counters and the analytics data we hold nothing that identifies you, so we usually cannot find your data in them.

You can also complain to a data protection authority. In Hungary that is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Falk Miksa utca 9–11, 1055 Budapest.

Changes

This policy changes when the site changes. Its full history is public in the project's repository.