Privacy
Gociux (Mihai Marangoci, Sibiu, Romania) is the controller for the data below. Questions or requests: [email protected].
No cookies, no analytics scripts, no ad or tracking pixels. Pages, fonts and scripts are served from gociux.com. To see which articles are useful we keep one counter per page per day (for example "/insights/nis2-requirements-explained, 24 Oct: 31 views"). No IP address, cookie, device ID or browser string is stored with it, and automated traffic is not counted, so it can't be linked to you.
When you start typing in a form, we load Cloudflare Turnstile from challenges.cloudflare.com to tell people from spam bots. Cloudflare processes technical signals from your browser for that check. Nothing loads from Cloudflare until you interact with a form.
We store the name, email address, company, topic and message you send, plus your approximate country as reported by Cloudflare, in a Cloudflare D1 database in the EU region. To prepare a useful reply we also run the same public checks our free tools do against the domain of your email address (its email security records and website security headers). We use all of this only to answer you and, if we work together, to run the engagement. Legal basis: our legitimate interest in replying to you and taking steps you ask for before a contract (GDPR Art. 6(1)(b) and (f)).
Retention: messages and their notes are deleted 24 months after the last contact unless we're working together; messages our filter flags as spam are deleted after 90 days.
If you subscribe (on the homepage, via the tick box on the contact form, or from stack check), we store your email address, a random token used for your confirm and unsubscribe links, the sign-up date and, if you chose one, the list of vendors and products you want highlighted. Nothing is sent until you click the confirmation link; unconfirmed sign-ups are deleted after 7 days. Every brief has a one-click unsubscribe, which deletes your record immediately. Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
Public editions of the brief (without anyone's personal stack section) are published at gociux.com/brief.
The app at gociux.com/app (installable from your browser) keeps your product list on your device. If you turn on alerts, we store your device's push address and keys (issued anonymously by your browser's push service, for example Google Firebase Cloud Messaging on Android), your alert choice and, in "my stack" mode, your product list. No name, email, phone number, location or advertising ID. Turning alerts off in the app deletes the record (expired addresses are deleted automatically the next time we try to send). Legal basis: your consent (GDPR Art. 6(1)(a)). Notification contents are encrypted end to end between our server and your device.
Cloudflare hosts the site, runs the forms and the database, and provides Turnstile. Like any host it processes connection data (such as IP addresses) transiently for delivery and security; we don't access or keep those logs. Google (or your browser vendor) relays encrypted push notifications to your device. Resend delivers our emails (form confirmations, notifications to us, the brief), so it processes the recipient address and message content for delivery. Both act as processors under their data processing agreements. We never sell or share your data with anyone else.
Stack check, CVE trends, the header and email checks and the self-assessment don't store what you enter. Lookups run through gociux.com and only what you type in the address bar stays in your browser history.
Access, rectification, erasure, restriction, objection, portability and withdrawing consent: write to [email protected] and we'll handle it without ceremony, within one month at the latest. You can also complain to your supervisory authority (in Romania: ANSPDCP).
Last updated: 24 October 2026