Privacy policy

Last updated: 18 October 2026

This policy explains what personal data we process when you visit netkido.tech, write to us or use the Netkido platform, in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on data protection (LOPDGDD). The Spanish version is the legally binding one.

1. Data controller

2. What data we process and why

2.1 User account

When you sign up for the dashboard we collect your name, email address, company name and a password, which is stored only as an irreversible hash. If you turn on two-factor authentication, we store your authenticator app secret and your recovery codes encrypted. We also record your language and the company accounts you belong to, with your role in each.

• Purpose: creating and managing the account, reviewing sign-ups before activating them, and providing the service.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Retention: while the account is active. After it is closed, the data is blocked for the legal limitation periods (up to 6 years for accounting and tax obligations) and then deleted.

2.2 Technical data about your sites

For the network to work we process technical data about the machines you install at your sites. This is not data about people, but it may be linked to your company:

• machine name, operating system and agent version;
• the public IP the site connects from and the address assigned to it inside the private network;
• the local network range and the names of the machine's network interfaces;
• WireGuard public keys and the agent secret (stored encrypted);
• operating metrics: latency, traffic sent and received, CPU and memory use, and time of last contact;
• site events (connection, disconnection, changes) and the output of the jobs and diagnostics you run from the dashboard.

Netkido does not inspect or store the content of the traffic between your sites: it only routes it and counts its volume.

• Purpose: providing the service, showing network status, alerting you to incidents and applying plan limits.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legitimate interest in the security of the service (Art. 6(1)(f) GDPR).
• Retention: metrics, 30 days; site events, 180 days; other site data, while the site exists in your account.

2.3 Activity log

We keep a log of significant actions in the dashboard (sign-ups, role changes, changes to sites and plans) with the user who made them, the date and the IP address.

• Purpose: security, incident resolution and traceability of changes.
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Retention: while the company account exists and, after it is closed, for the legal limitation periods.

2.4 Contact form

If you write to us from the website we collect your name, email, company (optional), subject and message, plus the IP address, browser and time of submission to prevent abuse.

• Purpose: answering your enquiry and the sales or support follow-up you ask for.
• Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box on the form; you can withdraw it at any time.
• Retention: until you withdraw consent, and at most 3 years after our last exchange.

2.5 Server logs

Our servers automatically log the IP address, date and time, requested address, response code and browser of each request.

• Purpose: security, prevention of unauthorised access and troubleshooting.
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Retention: at most 12 months.

3. Recipients and processors

We do not sell or share your data. Only the providers we need to run the service have access to it, under a data processing agreement:

We make no international transfers outside the European Economic Area other than, where applicable, those listed in this table, always with the safeguards of Chapter V GDPR. We may also disclose data to authorities when the law requires it.

4. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw any consent you have given, at any time by writing to info@netkido.tech from the email address linked to your account or telling us how we can verify your identity. We will reply within one month, extendable by two more in complex cases.

If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the supervisory authority of your country.

5. Cookies

The public website (this page, the home page and the legal pages) uses no cookies and no analytics or advertising tools. Fonts and all other resources are served from our own domain.

The customer dashboard (/app) uses only technical cookies needed to sign in, which therefore do not require consent:

6. Security

We apply technical and organisational measures appropriate to the risk, including: TLS-encrypted connections; WireGuard tunnels between each site and the hub; isolation of each customer's network; passwords and secrets stored as hashes or encrypted; mandatory two-factor authentication for Netkido staff and account owners; role-based permissions; an activity log; and access-restricted backups. If a security breach were to put your rights at risk, we would tell you without undue delay.

7. Minors

Netkido is a service for businesses and professionals. We do not knowingly collect data from anyone under 18.

8. Changes to this policy

If we change this policy in a significant way we will email registered users and update the date on this page.