1. Overview
This privacy policy explains how SkyCMD ("the site") collects, uses, and protects your personal data. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data we collect
We collect the following categories of personal data:
- Account data — your name and email address, provided when you register.
- Technical data — your IP address, browser type, operating system, and referring URL, collected automatically when you visit the site.
- Security data — challenge tokens and related metadata from Cloudflare Turnstile, used to distinguish genuine users from bots.
- Usage data — pages visited, timestamps, and general interaction patterns, used to understand how the site is used and to diagnose issues.
3. Lawful basis for processing
We process your personal data on the following legal bases:
- Contract — processing necessary to provide the service you have registered for (e.g. maintaining your account).
- Legitimate interests — processing necessary for site security, abuse prevention, and service improvement, where these interests are not overridden by your rights.
- Consent — where applicable, such as for optional communications. You may withdraw consent at any time.
4. How we use your data
We use your personal data to:
- Provide, maintain, and improve the site and your account.
- Protect against unauthorised access, abuse, and bot activity.
- Communicate with you about your account or changes to the service.
- Comply with legal obligations.
We do not sell your personal data. We do not use your data for profiling or automated decision-making.
5. Third-party services
We use the following third-party services that may process your data:
- Cloudflare — provides content delivery, DNS, DDoS protection, and Turnstile bot verification. Cloudflare may process your IP address and browser data. See Cloudflare's privacy policy for details.
- Hosting provider — the site is hosted on cloud infrastructure that processes request data (IP addresses, request logs) as part of normal operations.
- Application monitoring — we use monitoring tools that capture full request context, including IP addresses, URLs, headers, authenticated user information, database queries, and exception details. This data is used to diagnose errors, monitor performance, and maintain the reliability of the service.
We select providers that offer appropriate data protection safeguards. Where data is transferred outside the UK, we ensure adequate protections are in place.
6. Data retention
We retain your account data for as long as your account is active. Technical and security logs are retained for a limited period to support security investigations and then deleted. If you delete your account, we will remove your personal data within a reasonable timeframe, except where we are required by law to retain it.
7. Your rights
Under UK data protection law, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure — request deletion of your personal data, subject to legal exceptions.
- Restriction — request that we limit how we process your data in certain circumstances.
- Data portability — receive your data in a structured, commonly used format.
- Objection — object to processing based on legitimate interests.
To exercise any of these rights, please use our Contact. We will respond within one calendar month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Children
The site is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe someone under 16 has provided us with personal data, please contact us so we can remove it.
9. Security
We take reasonable technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), secure authentication, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this privacy policy from time to time. Material changes will be indicated by updating the "last updated" date at the top of this page. We encourage you to review this policy periodically.
11. Contact
For privacy-related questions or to exercise your data protection rights, please use our Contact.