// REGULATORY COMPLIANCE

Privacy Policy & Telemetry Governance

Effective Date: January 1, 2026 • Last Revised: March 2026 • Standard: GDPR / UK GDPR / CCPA

1. Scope & Legal Entity

This Privacy Policy outlines how Indexfuzzyrnk Data Labs Ltd. (referred to as "Indexfuzzyrnk", "we", "our", or "us", registered company number 14982041, having its registered corporate address at 74 Silicon Viaduct, Tech Quarter, Shoreditch, London EC2A 4NE, United Kingdom) collects, processes, and protects information when you visit Indexfuzzyrnk.com and utilize our benchmarking toolchains, directory APIs, or Stack Builder.

2. Data Collection Philosophy: Developer Privacy First

We operate under a strict principle of data minimization. We recognize that developers frequently work with proprietary intellectual property and sensitive repository topologies. Under no circumstances does Indexfuzzyrnk capture, store, or train upon your source code submitted to our client-side evaluation scripts.

2.1 Categories of Data Processed:

Network Diagnostics & Server Logs: IP addresses (anonymized at edge), user-agent strings, HTTP request headers, and routing latency required to protect our benchmark clusters against DDoS attacks.
Interactive Configurations: Temporary selections within our Stack Builder UI stored locally in your browser’s localStorage cache.
Direct Communications: Email addresses, developer handles, and messages submitted voluntarily through our Contact Desk or Newsletter Dispatch forms.

3. Lawful Basis for Processing (GDPR Article 6)

We process personal and diagnostic data under the following legal frameworks:

Legitimate Interests (Art. 6(1)(f)): Maintaining network integrity, calculating aggregate benchmark stats, and preventing fraudulent evaluation manipulation.
Consent (Art. 6(1)(a)): Sending developer dispatch newsletters and storing non-essential performance telemetry cookies.
Legal Obligation (Art. 6(1)(c)): Compliance with statutory tax, company recordkeeping, and cybersecurity reporting obligations under UK and EU law.

4. Sub-Processors & Data Transfers

Indexfuzzyrnk utilizes a minimal set of hardened enterprise infrastructure providers:

Entity / Provider	Processing Purpose	Data Region
Cloudflare, Inc.	Edge CDN, SSL Termination & DDoS Mitigation	Global Anycast Edge (EU-US DPF Certified)
Hetzner Online GmbH	Bare-Metal Benchmark Compute Clusters	Falkenstein & Helsinki (EU)
Postmark / ActiveCampaign	Cryptographically Signed Email Dispatch	Frankfurt / Virginia (Standard Contractual Clauses)

5. Data Retention Schedules

Server access logs are retained in rolling 14-day ring buffers before automated irreversible zeroization. Contact inquiries are retained for up to 24 months to maintain technical audit trails unless a deletion request is lodged.

6. Your Statutory Rights (GDPR / CCPA)

Subject to applicable data protection legislation, you are entitled to exercise the following rights without penalty or discrimination:

Right of Access (Art. 15): Obtain confirmation regarding whether your personal data is processed and receive a machine-readable copy.
Right to Rectification (Art. 16): Require immediate correction of inaccurate data.
Right to Erasure / "Right to be Forgotten" (Art. 17): Request permanent deletion of all stored contact records.
Right to Object (Art. 21): Object to any processing based upon our legitimate interests.

7. Data Protection Officer (DPO) Contact

To exercise any statutory right, file an audit query, or report a suspected vulnerability, contact our Data Protection Officer at:

Email: [email protected]
Postal Address: Attn: Data Protection Officer, Indexfuzzyrnk Data Labs Ltd., 74 Silicon Viaduct, Tech Quarter, Shoreditch, London EC2A 4NE, United Kingdom.