Privacy Policy

Last updated: May 12, 2026

SentriGate ("we", "us", "our") is a web security platform operated by SentriGate, based in Prishtina, Kosovo. This Privacy Policy explains what data we collect when you use our website and services, how we use it, and your rights over it.

1. What We Collect

Account information. When you register, we collect your name, email address, and billing information.

Site configuration data. To provide the service, we collect the domain names and origin server addresses of websites you add to SentriGate.

Traffic and security logs. SentriGate processes HTTP request metadata — IP addresses, User-Agent strings, request paths, response codes, and risk scores — on behalf of our customers. This data is used solely to operate the security layer and is not used for advertising.

Usage data. We collect analytics about how you use the SentriGate dashboard (pages visited, features used) to improve the product.

Cookies. We use session cookies to keep you logged in and preference cookies to remember your dashboard settings. No third-party advertising cookies are used.

2. How We Use Your Data

• To provide, operate, and improve the SentriGate platform
• To process subscription payments and send invoices
• To send service alerts, security notifications, and support responses
• To detect abuse, fraud, or misuse of the platform
• To comply with applicable legal obligations

We do not sell your personal data. We do not use traffic logs from your protected sites for any purpose other than operating SentriGate.

3. Data Sharing

We share data only with:

• Payment processors (e.g., Stripe) to handle subscription billing — they receive only what is necessary to process your payment.
• Infrastructure providers (e.g., Hetzner, OVH) that host our servers — data is processed within contractual data processing agreements.
• Legal authorities only when required by law or to protect rights and safety.

4. Data Retention

Account data is retained for as long as your account is active and for 90 days after cancellation. Security event logs (blocked requests, risk scores) are retained for 30 days by default and can be configured in your dashboard. You may request earlier deletion at any time.

5. Your Rights

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing in certain circumstances
• Receive a portable copy of your data
• Withdraw consent for marketing emails at any time

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

6. Security

All data in transit is encrypted via TLS. Account passwords are hashed and never stored in plain text. Access to production infrastructure is restricted to core team members and logged. We conduct periodic security reviews of our own systems — we use SentriGate to protect SentriGate.

7. Changes to This Policy

We may update this policy as the product evolves. Material changes will be communicated by email to registered users at least 14 days before taking effect. Continued use of SentriGate after that date constitutes acceptance.

Questions? Contact us at [email protected] or via our contact page.