Privacy Policy
Version: April 2026
Related documents: use of the services is governed by our Terms of Service; for hosted services, the Data Processing Agreement (DPA) applies.
1. Controller
Lanisce, razvoj programske opreme, d.o.o. Trnovo 44A, 5252 Trnovo pri Gorici, Slovenija E-mail: privacy@kubehz.io
2. What data we collect
2.1 Registration and user account
- E-mail address — for account creation and communication
- Password — stored as a cryptographic hash (bcrypt)
2.2 Cluster metadata
- Cluster name, Kubernetes version, node count, component status
- Heartbeat data (for registered/managed clusters)
- No workload data, no container images, no secrets
2.3 Access logs
- IP address — stored in server access logs for 7 days
- User agent, timestamps — for security and error analysis
2.4 Payment data
- Payments are processed by an external payment provider
- We do not store credit card numbers or bank details
- We store: the chosen contribution, payment status, timestamps
3. Legal basis
| Processing | Legal basis |
|---|---|
| Account creation, cluster provisioning | Art. 6(1)(b) GDPR (performance of a contract) |
| Access logs, security | Art. 6(1)(f) GDPR (legitimate interest) |
| E-mail notifications | Art. 6(1)(b) GDPR (performance of a contract) |
4. Recipients
| Recipient | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting infrastructure | Germany (FSN1/NBG1) |
No other third parties. No data transfers outside the EU/EEA. No Google Analytics. No advertising networks. No social media trackers.
5. Retention periods
| Data | Retention period |
|---|---|
| Account data | As long as the account is active |
| Cluster metadata | As long as the cluster is registered |
| Access logs | 7 days |
| After account deletion | All data deleted within 30 days |
6. Your rights
You have the following rights under the GDPR:
- Access (Art. 15) — what data we have stored about you
- Rectification (Art. 16) — correction of inaccurate data
- Erasure (Art. 17) — deletion of your data
- Restriction (Art. 18) — restriction of processing
- Data portability (Art. 20) — export of your data
- Objection (Art. 21) — objection to processing
Contact for data protection requests: privacy@kubehz.io
7. Automated decision-making
No automated decision-making or profiling takes place.
8. Cookies
We use only technically necessary cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| Session token | Authentication | Session |
kubehz-theme | Theme preference (light/dark) | 1 year |
i18n_redirected | Language redirect | 1 year |
No tracking cookies. No third-party cookies. No advertising cookies. No cookie banner required (only technically necessary cookies, ePrivacy Directive).
More information: Cookie Policy
9. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority:
Informacijski pooblascenec (Information Commissioner of the Republic of Slovenia) Dunajska cesta 22, 1000 Ljubljana, Slovenija https://www.ip-rs.si
This is an English translation provided for convenience. The German version of this privacy policy is authoritative. For questions, contact privacy@kubehz.io.