What this website collects, and why.

This website, ddosphere.com, is operated by Virgosol IT and Software Solutions A.Ş. ("Virgosol", "we"), which builds and runs Ddosphere. We decide why and how the personal data described here is processed.

For anything about your data, write to [email protected].

When you visit. The server that delivers the site records standard request data: your IP address, the time, the page requested, and the browser's user agent. We use it to deliver the site, keep it secure, and fix problems. The legal basis is our legitimate interest in running a safe, working website.

When you send the contact form. We receive your name, work email, company, country, what you need to validate, the page you sent it from, and, if you add them, your phone number, role, company size, and a preferred window. The form also sends where your visit came from: the first page you opened on this site, the site that linked you here, and any campaign tags or ad click IDs in that first address (such as utm_source or gclid). The page keeps these in memory only while you browse; nothing is stored on your device. We record the request in our sales CRM and use it to answer you, scope a demo, and prepare an offer, and the campaign details to see which of our campaigns and links bring requests. The legal basis is taking steps at your request before a possible contract. To stop repeated automated sends, the server holds your connection's IP address in memory for ten minutes and then drops it.

When you open the contact page. Cloudflare Turnstile checks that the form is sent by a person, not a bot. It reads signals from your browser and connection, including your IP address and user agent, and gives the form a one-time token that our server confirms with Cloudflare before it accepts the request. It sets no cookies on this site and is not used for advertising. The legal basis is our legitimate interest in keeping automated spam out of the form.

When you email us. We keep the correspondence to answer you and, if you become a customer, to set up and run your package.

When you allow usage measurement. Google Analytics, loaded through Google Tag Manager, records which pages you visit, the site you came from, your browser, device type, and approximate location, and links your visits through a random ID kept in its cookies. We use the reports to see which pages help people. The site tells Google that none of it may be used for advertising. The legal basis is your consent, which you can withdraw at any time with the switch at the foot of every page; switching it off deletes the cookies.

We do not use your data for advertising, we do not sell it, and we do not build profiles from it.

We use a small number of providers. Each acts on our behalf under its data processing terms:

• Cloudflare delivers and protects the website, so it processes request data such as your IP address, and runs the Turnstile check on the contact page.
• Amazon Web Services (Amazon SES, Stockholm region) sends the contact form to our inbox.
• Microsoft hosts the inbox where your request and our correspondence are kept (Microsoft 365), the Teams channel where our sales team is told about your request (Microsoft Teams), and the sales CRM where it is recorded (Dynamics 365, in its European region).
• Google (Google Tag Manager and Google Analytics) measures page visits, only if you allow usage measurement. Google may process this data in the United States.

These providers run infrastructure in several countries, so your data may be processed outside the country you are in.

• Server request logs: only as long as needed to run and secure the site.
• The IP address used to limit repeated form sends: ten minutes, in memory only.
• Usage measurement: kept in Google Analytics for the retention period set in our account, at most 14 months. Its cookies last up to two years in your browser, unless you switch measurement off, which deletes them.
• Contact requests, in the inbox and the CRM, and email: as long as needed to answer you and, if you become a customer, for the business relationship and the retention periods the law requires.

Depending on where you live, data protection law, including the EU General Data Protection Regulation and Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK), gives you the right to:

• learn whether we process your data, and get a copy of it;
• have it corrected if it is wrong, or deleted;
• restrict or object to how we use it;
• receive the data you gave us in a portable format;
• complain to a data protection authority, such as the one where you live or Türkiye's KVKK Authority.

To use any of these rights, write to [email protected]. We answer within the time the law allows.

This policy covers the website. When your organization uses the Ddosphere platform, the data processed there, such as user accounts, registered targets, and test results, is handled under your organization's agreement with us.

If what the site does with data changes, we update this page in the same release and change the date at the top.