V6Direct Geofeed

Legal

Privacy Policy

Effective Date: August 5, 2025

This Privacy Policy describes how V6Direct.org ("we," "us," or "our") collects, uses, and discloses your personal information when you use the V6Direct Geofeed platform, our website, and related services (collectively, the "Services").

We are committed to protecting your privacy and complying with applicable data protection laws, including the GDPR and German DSGVO.

1. Information We Collect

Account Information

When you register for or use the Services, we collect:

  • Your email address (required, used as your login identifier)
  • Your display name (optional)
  • Your password, stored only as an argon2id hash — we never store or have access to the plaintext
  • Your account role and verification status

Network and Geolocation Data You Submit

The purpose of the Services is to help you publish RFC 8805 geofeed files. We therefore store the data you enter for that purpose:

  • IP prefixes (IPv4/IPv6) that you register
  • Geolocation you assign to those prefixes (country, region, city, postal code and optional coordinates)
  • Project names, categories, and member assignments

Please note: prefixes in a project marked as public are published at a public geofeed URL by design. Do not enter information in those fields that you do not intend to publish.

Security and Technical Information

To secure your account and the platform, we record:

  • IP address and browser user agent associated with each login session
  • IP address, user agent and action performed in our security audit log (for example logins, prefix changes, and administrative actions)
  • API key metadata: the key name, a display prefix, and when the key was last used. API keys themselves are stored only as SHA-256 hashes

We do not use advertising or analytics cookies. The only cookie we set is the session cookie required to keep you signed in. We do not monitor, log or inspect your network traffic, and we do not process payment information through this platform.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Services
  • Authenticate users and secure your account
  • Generate and publish the geofeed files you configure
  • Prevent fraud, abuse, and security incidents
  • Communicate with you about the Services and updates
  • Comply with legal obligations

We do not sell your personal information to third parties.

3. Data Sharing and Disclosure

We may share your information in the following circumstances:

  • With service providers who assist in delivering the Services
  • With law enforcement when required by legal process
  • Publicly, where you have configured a project to publish a geofeed file — the prefixes and geolocation in that project become publicly accessible at its geofeed URL, which is the intended function of the Services
  • During business transfers (merger, acquisition, or sale)

We require all third parties to respect your privacy and protect your information.

4. Data Retention

We retain your personal information only as long as necessary:

  • Account information and the prefixes/geolocation you have entered: until you delete them or close your account
  • Login sessions: until they expire or you sign out, whichever is sooner
  • Security audit log entries (including IP address and user agent): retained for security and accountability purposes
  • Email verification and password reset tokens: until used or expired

Deleting your account cascades to your sessions, API keys and projects. Audit log entries are retained but are detached from your user record.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Encryption of data in transit (TLS 1.2+)
  • Passwords hashed with argon2id; session tokens and API keys stored only as SHA-256 hashes
  • Secure network architecture with firewalls
  • Rate limiting and audit logging of security-relevant actions
  • Access controls and authentication mechanisms

While we strive to protect your information, no security measures are 100% effective.

6. Your Rights (GDPR/DSGVO)

Under applicable data protection laws, you have the right to:

  • Access your personal information
  • Request correction of inaccurate information
  • Request deletion of your information
  • Object to or restrict certain processing
  • Data portability
  • Withdraw consent where applicable

To exercise these rights, please contact us at privacy@v6direct.org.

7. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure such transfers comply with applicable data protection laws through EU Standard Contractual Clauses or other lawful transfer mechanisms.

8. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through our website or via email. Your continued use of the Services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your information: