DARKPHISH COMMUNITY

Licensing Privacy Notice

1. Who handles licensing information

The actual data controller must be identified before publication. Dark Army s. r. o., Slovakia, is the planned company and has not yet been incorporated. It is not presented as an existing controller. Proposed address supplied by the project owner: Ulica Ivana Krasku 4257/27, 917 05 Trnava, Slovakia. Proposed company number: XXXX (placeholder, not assigned). Proposed contact: info@darkarmy.sk; the project owner identifies Websupport as its provider. Proposed licensing support: license@darkphish.sk (mailbox setup pending). References to “we” and “us” below are draft wording for the eventual identified controller. Data protection officer or representative, if applicable: [CONFIRM applicability and contact].

2. Information processed by this feature

• Your email address, accepted terms version and the time-limited verification request.
• License identifier, status, limits, expiry, creation time and an identifier for the activated installation.
• Application version and the most recent activation or refresh time.
• Cryptographic hashes of verification, activation and refresh credentials. Verification emails necessarily contain the usable, short-lived link.
• Security events such as issuance, activation, refresh and administrator actions, with timestamps and relevant identifiers.
• The connecting IP address for request handling and abuse prevention. The plugin’s rate-limit table stores time-bucketed keyed hashes rather than raw IP addresses. This does not make all processing anonymous.

The licensing API does not request your campaign messages, recipient lists, collected credentials or campaign results. This statement is limited to the licensing endpoints. Information you place in a support email is also received by the support mailbox.

3. Purposes and legal bases — proposed for operator confirmation

We use registration and activation information to provide the service you request. Contract necessity is the proposed basis when you are the contracting user; legitimate interests in administering an organizational service may apply to business representatives. Abuse prevention and security auditing are proposed legitimate interests. Legal obligations apply where a specific law requires processing. These bases must be confirmed for the actual service and audience before launch.

The license-terms checkbox is not consent to marketing. This feature does not add your address to a marketing list. Providing an email address and passing verification are necessary to receive an activation through this service.

4. Service providers and Turnstile

The project owner has identified SlovakNET as the hosting provider for fsociety.sk and confirmed that WordPress email delivery has not yet been configured. The intended sending mailbox is license@darkphish.sk at Websupport, as selected by the project owner; mailbox creation, SMTP configuration and delivery testing are still pending. The separate sales@darkphish.sk address is used for sales enquiries on the product website. [CONFIRM the contracting entities, hosting and email processing locations, processor arrangements and any other providers that can access licensing data.]

The form uses Cloudflare Turnstile for bot prevention. Cloudflare describes processing connection and browser signals, including IP address and user-agent information, and distinguishes processing on our behalf from its own controller role for improving bot detection. See the Turnstile Privacy Addendum and Cloudflare Privacy Policy.

[CONFIRM international processing locations and the applicable transfer mechanism and safeguards for the actual hosting, email and Cloudflare arrangements. State how a user can obtain a copy of safeguards. Do not assume that a Slovak company means all processing stays in Slovakia or the EEA.]

5. Storage and retention — incomplete operational schedule

A verification link becomes unusable after 30 minutes. Expired verification requests and rate-limit buckets are removed by scheduled cleanup, subject to the host executing it and processing its batch limit. Expiry is not a guarantee of immediate deletion from storage or backups.

License records and security events currently remain until the operator removes them; the plugin does not automatically purge them or erase them on deactivation. [CONFIRM and implement retention periods or objective criteria for expired/revoked licenses, security events, support email, delivery logs, web logs and backups before publishing this notice.]

The registration script does not write the email address or activation key to localStorage or sessionStorage and does not send WordPress cookies with API requests. This statement does not cover hosting logs, other pages or any storage used by third-party security services.

6. Your requests and complaints

Depending on applicable conditions, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Contact info@darkarmy.sk; we may need proportionate identity verification. If processing relies on consent, withdrawal does not affect prior lawful processing.

You may complain to a competent supervisory authority, including the Office for Personal Data Protection of the Slovak Republic, without first contacting us.

7. Automated checks and updates

The feature automatically checks challenge validity, request frequency, verification tokens, license status and installation binding. These checks can reject a request; contact us for assistance. [CONFIRM whether any additional decision-making or profiling is used elsewhere in the deployed service.]

We will update this notice when the actual processing changes and provide any notice required by law. Read the Community Service Terms for how activation works.