Privacy policy
Last updated: 7 November 2026
Pre-launch version. This policy covers the website and the early-access form. It will be reviewed again before hosted scans or credit sales open.
1. Who is responsible
The controller of your personal data is Epicworks s.r.o., Lidická 700/19, Veveří, 602 00 Brno, Czech Republic, IČO 05909104, registered with the Regional Court in Brno, section C, file 98895. Contact for all privacy questions: [email protected].
2. What we collect and why
| Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Name, email address, code platform (GitHub, GitLab or both), time of request | To contact you about EpicScan early access | Your consent, Art. 6(1)(a) | Until early access ends, and at most 12 months from your request |
| Technical signals from your browser checked by the spam filter (Cloudflare Turnstile), only when you use the form | To stop automated spam | Legitimate interest in protecting the form, Art. 6(1)(f) | Not stored by us; processed by Cloudflare for the check |
| Standard server logs: IP address, time, requested page, browser type | Security, abuse prevention and fault finding | Legitimate interest, Art. 6(1)(f) | As set by our hosting provider, typically a few days |
| Aggregated, cookie-free visit statistics (if enabled) | To understand how the site is used | Legitimate interest, Art. 6(1)(f) | Aggregated only; no profile of you is built |
Giving us your details is voluntary. Without them we cannot contact you about early access. We do not sell your data, use it for advertising, or make automated decisions about you.
3. Cookies and tracking
This site sets no cookies and uses no browser storage. It contains no advertising or social-media trackers. Fonts and all site files are served from our own domain.
4. Who processes data for us
- Cloudflare, Inc.: website hosting, the form function, spam check (Turnstile) and, if enabled, cookie-free web analytics.
- Mailgun Technologies, Inc.: delivers early-access requests to our inbox.
Both act on our instructions under data processing agreements. Both are based in the United States, so your data may be transferred there; such transfers rely on the EU-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses.
5. Your rights
You can ask us at any time for access to your data, correction, deletion, restriction of processing, a copy in a portable format, or object to processing based on legitimate interest. You can withdraw your consent at any time by emailing [email protected]; this does not affect processing before the withdrawal. We answer within one month.
You also have the right to complain to the Czech supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.
6. Code you send for scanning
The early-access form collects no source code. When hosted scans open, code you submit will be processed only for the scan you request, on Mac Studio machines we own and operate in the Czech Republic, deleted when the scan ends and never used to train models. Separate scan terms will apply before that service starts.
7. Security
The site uses HTTPS only, strict security headers, and a spam filter on the form. Report security issues to [email protected] (see security.txt).
8. Changes
We will update this page when our processing changes and show the date of the latest version at the top.