Privacy Policy

Data controller

DIKENGA9 SAS, operator of botbusters.dev. DPO contact: privacy@botbusters.dev.

What we collect on your visitors

• Interaction timing only: keystroke intervals, mouse-move cadence, pointer type. We never see the content of what your users type.
• User agent, screen size, coarse locale.
• Truncated IP for rate-limiting (last octet removed).

We do not collect passwords, form values, page URLs beyond the protected endpoint, or third-party identifiers.

What we collect on Bot Busters customers

Email, company (optional), billing details via Stripe (we never see full card numbers), usage counts.

Hosting

All processing is in the European Union. No transfer outside the EU/EEA except Stripe (billing) under SCCs.

Cookies

Zero third-party cookies. See Cookies.

Retention

• Verdicts & event traces: 30 days (rolling window).
• Aggregated analytics: 13 months.
• Billing records: 10 years (French accounting law).

Your rights (GDPR)

Access, rectification, deletion, portability, restriction: write to privacy@botbusters.dev. Complaint: CNIL (France).

Subprocessors

• Supabase (EU) — database & auth.
• Cloudflare (EU edge) — CDN & DDoS.
• Stripe Payments Europe — billing.
• Resend — transactional email.