Privacy policy
Last updated: September 30, 2026
SURCOD S.R.L. is the data controller for KeySlip. Our registered address is Sat Baciu, Comuna Baciu, Str. Vanatorului nr. 6, Biroul 1, jud. Cluj, 407055, Romania. For privacy requests, contact office@surcod.ro.
What we process and for how long
D1 stores only encrypted messages, their IV, optional salt and expiry, never the decryption key or plaintext. The key remains in the link fragment. Each message is deleted atomically on its first read, or becomes unavailable at expiry, after at most seven days; expired rows are removed every five minutes. For rate limits, D1 stores an HMAC-SHA256 of the connection IP, derived with a daily rotating key, plus hourly counters. The application does not store raw IP addresses. Expired counters are removed every five minutes. Application request logging is disabled; minimal technical diagnostics do not include message content, keys, passwords or secret identifiers. Cloudflare also processes connection data under its own retention policies.
Why we process it
Processing the encrypted message is necessary to provide the service you request, under GDPR Article 6(1)(b). Abuse prevention and essential technical diagnostics rely on our legitimate interest in a safe, reliable service, under Article 6(1)(f). No message content is used for advertising, profiling or automated decisions.
Cookies and browser preferences
KeySlip has no cookies or individual visitor tracking. localStorage stores only the theme and language you choose. These preferences remain in your browser until you change or clear them; they are not sent to the server. A recipient’s message is held temporarily in page memory, never in localStorage, so an incorrect password can be retried without fetching it again.
Aggregate service counts
We count successful message creations and reads, public-page requests and client downloads by day and category. These counters contain no IP addresses, visitor identifiers, secret identifiers, URLs or message content. We retain daily totals for 180 days to understand service use; they do not identify individual visitors.
Team pilot enquiries
If you submit the team pilot form, we store your company name, email address, selected needs, expected volume, language, optional price interest and contact consent for up to 90 days. We use them to reply about the pilot with your consent, which you can withdraw through the privacy contact below. This is separate from encrypted messages. Do not submit passwords or confidential data in this form. No purchase or subscription is created.
Hosting and CDN
Cloudflare hosts KeySlip through Workers and D1 and acts as our processor under its Data Processing Addendum. Its infrastructure operates in global regions, so personal data may be transferred outside the EU/EEA, including to the United States. Applicable safeguards include standard contractual clauses and the EU–US Data Privacy Framework where applicable. Cloudflare receives encrypted messages and connection data, but never the decryption key. The recipient you share the complete link with can read the message.
Your rights
Subject to the applicable conditions, you may request access, correction, erasure, restriction or portability of your data and object to processing based on legitimate interests. Contact office@surcod.ro. We may need enough information to locate a record, but never send the key or password. Deleted messages cannot be recovered, and encryption can prevent us from identifying message content. You may complain to Romania’s supervisory authority, ANSPDCP, at www.dataprotection.ro, or to your local supervisory authority. Requests are normally answered within one month, subject to the extensions permitted by GDPR.