Privacy Notice

This notice explains how QShield processes personal data under the Malaysian Personal Data Protection Act 2010 (PDPA), as amended. It is a working draft for review by the data controller and is to be confirmed by legal counsel before production use.

What we collect

• Account data: your name, email address, role, password hash (never the password itself), and two-factor settings.
• Security and usage data: IP address, approximate location derived from the IP (city and country), device type, operating system, browser, the page you came from, and pages or buttons used on the landing page.
• Contact form data: name, email, company and message.
• Scan data: the hostnames and ports you ask QShield to scan, and the public cryptographic information those servers present.

Why we collect it

• To provide and secure the service: sign-in, two-factor authentication, fraud and abuse detection, and an audit trail.
• To understand landing-page interest and reply to demo requests.
• To meet legal and audit obligations.

Cookies

We use strictly necessary cookies for sign-in sessions and security. With your consent, we also keep one random first-party identifier in your browser's local storage to count unique landing-page visits; we store only a salted hash of it. We do not use advertising or third-party tracking. You can decline in the banner on the landing page, and declining removes the identifier.

Retention

System logs are kept for 365 days by default. Account data is kept while your account exists. Files are stored in Cloudflare R2.

Your rights

You may ask to access or correct your personal data, or withdraw consent, by writing to the administrator at new.technology@hotmail.com.

Visitor locations are approximate: IP Geolocation by DB-IP (db-ip.com).