Effective: October 27, 2026
This Privacy Policy governs the collection, processing, and retention of personal data by natted.cloud ("we," "us," "our") when you use our interactive networking education platform. We act as the data controller for the purposes of applicable data protection legislation.
| Category | Data | Purpose | Retention |
|---|---|---|---|
| Account | Email address, password hash (bcrypt) | Authentication, account recovery, occasional updates about the Service (section 5) | Until account deletion |
| Session | Session token, IP address | Authentication continuity | 7 days (auto-purge) |
| Anonymous ID | Random browser identifier (cookie) | Lab ownership for non-registered users | 1 year |
| Lab Data | Network topologies, configurations | Service functionality | 3 hours (free), until deletion (registered) |
| Audit Log | Action type, resource ID, timestamp | Security monitoring, abuse prevention | 90 days |
| Feedback & contact | Message, optional email, IP address | Responding to you, abuse prevention | 24 months |
| Page counts | Hourly totals per page, and the name of the site that linked to your first page. No cookie, no identifier, no IP address or browser details are stored with them | Knowing which pages are read | Kept as totals |
| Analytics (consent only) | Google Analytics identifiers, pages viewed, approximate location | Understanding which pages are useful | 14 months |
We do not collect: phone numbers, physical addresses, payment information, browsing history outside the Service, or biometric data. We run no advertising and no advertising cookies: the Google Consent Mode signals ad_storage, ad_user_data and ad_personalization are set to denied permanently and are never granted, whatever you choose below. We do not sell, rent, or share personal data with third parties for marketing purposes.
Contractual necessity: Processing of account and lab data is necessary for the performance of the service you requested. Legitimate interest: Session management, security monitoring, and abuse prevention serve our legitimate interest in maintaining a secure and functional platform. Occasional updates to account holders (section 5) serve our legitimate interest in telling the people who use the Service what has changed and in hearing what to improve; you can opt out of them at any time. Consent: By creating an account or using the Service, you consent to processing as described herein.
Account emails. When you sign up, or ask for a new link, we email you a link to confirm your address. These come from [email protected] and are part of having an account.
Occasional updates. Once you have confirmed your address, we may now and then email you about natted.cloud: new labs, changes to the Service, and requests for your feedback. They come from [email protected], where replies are read by a person. We send them only to people who hold an account, and never on anyone else's behalf.
Opting out. Every update tells you how to stop them: reply "unsubscribe", use your mail program's unsubscribe button, or write to [email protected]. You will not receive another update, and your account is not affected. Account emails continue while you hold an account.
Delivery. Our emails are sent through Resend, which receives your email address and the message in order to deliver it, and processes them outside the European Economic Area as described in its Privacy Policy.
Passwords are stored using bcrypt one-way hashing with per-user salts. Session tokens are cryptographically random. All data in transit is encrypted via TLS 1.2+. Access to infrastructure is restricted to authorized operators via SSH key authentication. Lab environments are isolated using cloud-based virtualization with process, network, and mount separation.
Data is stored on servers we rent from a hosting provider, located outside the European Economic Area, so the data you give us is transferred outside it. It is protected there as described in section 6, and the rights in section 8 apply wherever it is stored. We use Cloudflare for TLS termination and DDoS protection, which may process request metadata at edge locations globally in accordance with their Privacy Policy. The emails we send pass through Resend, also outside the European Economic Area (section 5).
Subject to applicable law, you have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion of your account and associated data; (d) object to processing based on legitimate interest; (e) receive your data in a portable format. To exercise these rights, contact us at [email protected].
Strictly necessary — always active. netgns_session (authentication, 7-day expiry) and netgns_anon (anonymous lab ownership, 1-year expiry). Both are first-party. We also store your onboarding and feedback preferences in your browser's local storage. These are required for the Service to function and are not used to track you across other sites.
Analytics — only with your consent. We use Google Analytics 4 to see which pages people find useful. It is loaded in Google Consent Mode v2 with analytics_storage denied by default, so no analytics cookies are set and no analytics identifiers are collected unless you choose Accept. Choosing Reject leaves it denied, and everything needed to build and run a lab works identically either way. Google Ireland Limited acts as our processor; data may be transferred outside the EEA under the EU-US Data Privacy Framework and Standard Contractual Clauses.
If your browser sends a Global Privacy Control signal, we treat that as a refusal and do not ask.
You can change your choice at any time: Cookie settings. Withdrawing consent is as easy as giving it, and takes effect immediately.
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided personal data, we will take steps to delete such data promptly.
We may update this Privacy Policy periodically. Material changes will be communicated through the Service interface. The "Effective" date above indicates the most recent revision.
natted.cloud — Interactive Networking Labs
Privacy inquiries: [email protected]