// privacy

Website and demo privacy.

You can evaluate Hodos without an account and without submitting information about your company. This notice explains the small amount of technical data that a public HTTP service still needs to process.

Effective 2 August 2026 · version 1.0

No accountNo sign-up or subscriber profile.
No trackingNo analytics, ad pixels or cross-site profiling.
No customer dataThe public demo is synthetic and has no upload.

Scope and controller

This notice covers hodosgraph.com and the public synthetic Hodos demo. The operator of these services, presented under the Hodos name, determines why and how the limited personal data described below is processed. Contact: [email protected].

It does not govern data inside a self-hosted Hodos installation. The organization deploying Hodos is responsible for its environment, identity provider, integrations, access policies and retention. Any separate Hodos service that introduces accounts or customer data will provide its own notice before that collection begins.

What is processed, and why

Request and security metadata

Examples
IP address, user agent, requested URL, timestamp and edge-security signals
Purpose
Deliver the site, maintain availability, prevent abuse and investigate failures
Legal basis
Legitimate interests — Article 6(1)(f) GDPR
Retention
For the shortest operational period configured by the infrastructure provider; longer only for an incident or legal claim

Email correspondence

Examples
Your address, message, attachments and mail transport metadata
Purpose
Answer an enquiry and, when requested, take steps before entering into an agreement
Legal basis
Legitimate interests — Article 6(1)(f); pre-contract steps — Article 6(1)(b)
Retention
Until the enquiry is closed, then only as needed for security, legal claims or statutory records

Theme preference

Examples
The value of hodos-theme in local storage
Purpose
Remember light or dark mode on this device
Legal basis
Functional browser storage; the value is not sent to Hodos as a cookie
Retention
Until you clear site storage or change the preference

Providing email data is voluntary. Basic request metadata is technically necessary to deliver and protect the site; without it, the HTTP request cannot be served reliably.

What this site does not use

  • No newsletter, subscriber list, contact form or behavioural profile.
  • No product analytics, advertising pixels or third-party tracking scripts.
  • No third-party font, image or script CDN.
  • No upload or free-text company-data input in the public demo.
  • No solely automated decision that creates legal or similarly significant effects.

Cookies and local storage

Hodos application code does not set cookies. The site stores only thehodos-theme functional preference in your browser. An infrastructure security provider may set a strictly necessary cookie if an abuse-protection challenge is activated; it is not used by Hodos for analytics or advertising.

Recipients and infrastructure

Cloudflare delivers the public site and may process request metadata as an infrastructure provider. Email providers process correspondence when you choose to write to us. Data may also be disclosed to professional advisers or public authorities where necessary to protect legal rights or comply with a binding legal obligation. Hodos does not sell personal data.

Infrastructure and email providers may process data outside the European Economic Area. Where GDPR transfer rules apply, the transfer must be covered by an adequacy decision or appropriate safeguards such as the European Commission's standard contractual clauses. You can request information about the safeguard relevant to your data via the privacy address.

The public demo

Everything shown in the demo is generated and does not represent a real organization. The environment is isolated, destructive actions are simulated or constrained, and the dataset resets on a schedule. Do not submit secrets, personal data or information about your infrastructure. Normal request and security metadata is still processed when your browser connects to the demo.

Your rights

Depending on the circumstances, you may request access, rectification, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. These rights are not absolute; for example, some data may need to be retained for a legal obligation or the establishment, exercise or defence of legal claims.

Send a request to [email protected]. We may ask for proportionate information to verify that the request concerns you. You may also lodge a complaint with thePolish Data Protection Office (UODO)or the supervisory authority where you live or work.

Changes and questions

Material changes will be reflected here with a new effective date. Privacy questions and requests can be sent to [email protected].