Effective: September 17, 2026
This Privacy Policy governs the collection, processing, and retention of personal data by natted.cloud ("we," "us," "our") when you use our interactive networking education platform. We act as the data controller for the purposes of applicable data protection legislation.
| Category | Data | Purpose | Retention |
|---|---|---|---|
| Account | Email address, password hash (bcrypt) | Authentication, account recovery | Until account deletion |
| Session | Session token, IP address | Authentication continuity | 7 days (auto-purge) |
| Anonymous ID | Random browser identifier (cookie) | Lab ownership for non-registered users | 1 year |
| Lab Data | Network topologies, configurations | Service functionality | 3 hours (free), until deletion (registered) |
| Audit Log | Action type, resource ID, timestamp | Security monitoring, abuse prevention | 90 days |
| Feedback & contact | Message, optional email, IP address | Responding to you, abuse prevention | 24 months |
| Page counts | Hourly totals per page, and the name of the site that linked to your first page. No cookie, no identifier, no IP address or browser details are stored with them | Knowing which pages are read | Kept as totals |
| Analytics (consent only) | Google Analytics identifiers, pages viewed, approximate location | Understanding which pages are useful | 14 months |
We do not collect: phone numbers, physical addresses, payment information, browsing history outside the Service, or biometric data. We run no advertising and no advertising cookies: the Google Consent Mode signals ad_storage, ad_user_data and ad_personalization are set to denied permanently and are never granted, whatever you choose below. We do not sell, rent, or share personal data with third parties for marketing purposes.
Contractual necessity: Processing of account and lab data is necessary for the performance of the service you requested. Legitimate interest: Session management, security monitoring, and abuse prevention serve our legitimate interest in maintaining a secure and functional platform. Consent: By creating an account or using the Service, you consent to processing as described herein.
Passwords are stored using bcrypt one-way hashing with per-user salts. Session tokens are cryptographically random. All data in transit is encrypted via TLS 1.2+. Access to infrastructure is restricted to authorized operators via SSH key authentication. Lab environments are isolated using cloud-based virtualization with process, network, and mount separation.
Data is stored on infrastructure located within the European Union. We use Cloudflare for TLS termination and DDoS protection, which may process request metadata at edge locations globally in accordance with their Privacy Policy.
Subject to applicable law, you have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion of your account and associated data; (d) object to processing based on legitimate interest; (e) receive your data in a portable format. To exercise these rights, contact us at [email protected].
Strictly necessary — always active. netgns_session (authentication, 7-day expiry) and netgns_anon (anonymous lab ownership, 1-year expiry). Both are first-party. We also store your onboarding and feedback preferences in your browser's local storage. These are required for the Service to function and are not used to track you across other sites.
Analytics — only with your consent. We use Google Analytics 4 to see which pages people find useful. It is loaded in Google Consent Mode v2 with analytics_storage denied by default, so no analytics cookies are set and no analytics identifiers are collected unless you choose Accept. Choosing Reject leaves it denied, and everything needed to build and run a lab works identically either way. Google Ireland Limited acts as our processor; data may be transferred outside the EEA under the EU-US Data Privacy Framework and Standard Contractual Clauses.
If your browser sends a Global Privacy Control signal, we treat that as a refusal and do not ask.
You can change your choice at any time: Cookie settings. Withdrawing consent is as easy as giving it, and takes effect immediately.
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided personal data, we will take steps to delete such data promptly.
We may update this Privacy Policy periodically. Material changes will be communicated through the Service interface. The "Effective" date above indicates the most recent revision.
natted.cloud — Interactive Networking Labs
Privacy inquiries: [email protected]