What is collected, by what, why, for how long, and how to have it deleted.
Last updated: 28 August 2026
Karbonic Sàrl, Neuchâtel, Switzerland. For any question or request about your data: contact form.
The processing described below falls under the Swiss federal data protection act. When the person concerned resides in the European Union, the general data protection regulation also applies.
Our paid products — the recovery kit and the watch plugin — transmit no data at all. They run on your server and let nothing out of it.
There is one single exception, and it only triggers if you ask for it yourself: the reset of your access code, described below.
Only the free diagnosis transmits information, and only under the conditions described below. It is the counterpart of its being free, and it is announced to you before you use it.
The code that opens the repair assistant is shown only once, and it is kept nowhere in clear text — not even with us. We therefore cannot send it back to you: we hold no copy of it.
If you lose it, you can request a new one from the assistant. At that moment, and only at that moment, a brief exchange takes place with our servers:
No access code travels, neither by email nor to us. We only attest that someone has access to the registered inbox. The content of your site is never concerned.
These requests are kept for twelve months, with the date and the domain, so that abusive use can be detected.
If the site is clean, nothing is transmitted.
You can, through a separate box unchecked by default, send us a copy of the files classified as dangerous, in order to improve detection. This transmission is capped in size and concerns only the flagged files.
We advise against it if your site handles sensitive data: a file dropped by an attacker can contain information collected on your site. Refusing this option prevents neither the scan nor the report.
This information serves exclusively to improve our detection engine. It is neither sold, nor rented out, nor passed to a third party, nor used for advertising purposes.
Your name, your address and your message are used solely to reply to you, and kept for twelve months. No mailing-list subscription is made on that occasion.
Your email address and the declared domain serve to hand you your key and your download link, to limit abusive use and to reply to you. They are not used for any other purpose without your agreement.
The site and the collected data are hosted in Switzerland, with Infomaniak Network SA. Transactional emails travel through the same infrastructure.
The site currently loads its fonts from a third-party service. This dependency will be removed before sales open, the fonts being meant to be hosted with the site.
This site sets no audience-measurement or advertising cookie. No third-party analytics tool is installed on it.
You can request access to your data, its rectification, its deletion, or object to its processing. Write to us through the contact form stating the domain concerned; we reply within thirty days.
So that the deletion of the diagnosis data is possible, the sign-up address stays associated with the transmissions. That is the only reason for this association.
This text may evolve. The date of the last update appears at the top of the page.