Privacy Policy

Last updated: February 2026

1. Introduction

CSAR Computers ("we", "us", "our") operates the CSARhunter website and software. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

2. Data We Collect

2.1 Registration Data

When you create an account, we collect:

  • First name and last name
  • Email address
  • Password (stored as a secure bcrypt hash)
  • Company name (optional)
  • Address information (optional)
  • VAT number (optional)
  • Hunter hardware model (optional)

2.2 Contact Form Data

When you submit a contact form, we collect your name, email address, subject, and message content.

2.3 Technical Data

We automatically collect:

  • IP address (for rate limiting and security purposes)
  • Browser type and version
  • Pages visited and timestamps

3. How We Use Your Data

We use your data exclusively for:

  • Account creation and management
  • Email verification and account approval
  • Providing access to software downloads
  • Responding to contact form submissions
  • License management for the CSARhunter software
  • Security and fraud prevention (rate limiting)

4. Data Storage and Security

Your data is stored on secure servers located in Europe. We implement the following security measures:

  • Passwords are hashed using bcrypt with a cost factor of 12
  • All data transmission is encrypted via HTTPS/TLS
  • Access to personal data is restricted to authorized personnel only
  • Database access uses parameterized queries to prevent SQL injection
  • Session cookies are HttpOnly, Secure, and SameSite=Lax

5. Cookies

We use only functional cookies that are strictly necessary for the operation of our website:

  • Session cookie: Required for login functionality (expires at end of session)
  • Language preference: Stored in localStorage (not a cookie) to remember your language choice

We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

6. Third-Party Services

We use the following third-party services:

7. Data Sharing

We do not sell, trade, or share your personal data with third parties, except:

  • When required by law or legal process
  • To protect our rights, privacy, safety, or property

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data ("right to be forgotten")
  • Data portability: Receive your data in a machine-readable format
  • Object: Object to certain types of data processing
  • Withdraw consent: Withdraw your consent at any time

To exercise any of these rights, please contact us through the contact form on our website or via WhatsApp.

9. Data Retention

We retain your account data for as long as your account is active. If your account is deleted or your registration is rejected, we will remove your personal data within 30 days, unless we are required to retain it for legal or legitimate business purposes.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us through the contact form or via WhatsApp.