Privacybeleid

What the website and the product collect, why and for how long, and how to exercise your rights.

Draft: to be validated by a lawyer before publication. This text is provisional: it has not been validated by a lawyer and is not in force.
Legal information to complete. Mandatory details of the publisher have not been provided yet: this page is incomplete.

Who is responsible

The controller of the data described here (other than the data your own ToutWAF installations process on your side) is the publisher of the website, identified below and in the legal notice.

The website

  • No cookie is set and no analytics tool is used. The website loads no font, script, image or resource from a third party.
  • Your choice of language, display theme and tab is kept in the local storage of your browser (keys tw-lang, tw-theme, tw-tab-…). These values are never sent; you can erase them by clearing the site data in your browser.
  • The contact form opens your e-mail program: nothing is sent or recorded by the site itself. If you write to us, we use your message and your e-mail address to answer you.

The ToutWAF product

  • ToutWAF sends no telemetry and has no "phone home". It sends the publisher neither the requests of your visitors, nor the content of your sites, nor the list of your sites or customers.
  • The licence is a signed file verified on your machine: nothing is sent to verify it.
  • The product makes a small number of outbound connections to third parties (version check, definitions and threat feeds, certificates, features you turn on yourself). They are listed in the documentation, most of them can be turned off, and the third parties contacted see the IP address of your server.
  • The data of your visitors stays in your installation, for which you are the controller. Their default retention periods (30 days for security events and 365 days for the audit journal, for example) are set in the product.