Legal
Privacy
This page explains what this site collects, why, and what you can do about it. It is short because the site collects very little.
Last updated 21 October 2026
Who is responsible
Andrei Dodu, trading as Dodu Security, Sweden, is responsible for the processing described here. Contact: andrei@dodu.se.
What is collected
When you send the contact form. The form sends your name, email address, project or protocol name, engagement type, the scope and timeline text you write, an optional website, and the time you started the form. The request is delivered to the mailbox behind andrei@dodu.se.
When you visit the site. The server keeps standard access logs: IP address, user agent, requested URL and time. These are used to keep the site running and to investigate abuse.
Analytics. The site counts clicks on a small number of buttons and records the page path and the hostname of the referrer. The event does not include an identifier, a full referrer URL, or a cookie. There is no Google Analytics, no advertising pixel and no cross-site tracking.
Why it is processed
- To answer your request. The form data is used to reply, scope the work and, if we proceed, prepare an engagement. The legal basis is steps taken at your request before entering a contract.
- To keep the site secure. Access logs are processed on the basis of a legitimate interest in preventing abuse and keeping the service available.
- To understand what is used. Aggregate event counts are processed on the basis of a legitimate interest in improving the site. They are not used to profile you.
How long it is kept
Contact requests are kept while the conversation or engagement is active, and for up to 24 months after the last contact, then deleted unless the law requires a longer retention (for example, accounting records). Server logs are kept for up to 30 days.
Who receives it
The data is stored on infrastructure I control and in the mailbox that receives andrei@dodu.se. It is not sold, rented or shared for advertising. It is disclosed only if the law requires it, or to a provider strictly necessary to run the site or the mailbox, under a data processing agreement where required.
Cookies
This site sets no cookies. The analytics described above uses no cookie and no local storage identifier.
Your rights
You can ask for access to your data, correction, deletion, restriction, or a copy in a portable format, and you can object to processing based on a legitimate interest. Write to andrei@dodu.se and I will answer within one month. If you are not satisfied, you can complain to the Swedish Authority for Privacy Protection (IMY).
Changes
If this page changes, the date at the top changes with it. The current version is always at this address.