The short version: this website collects almost nothing. No tracking cookies, no advertising tech, no data sales. The only personal data we process is what you choose to send us.
Who is responsible
The controller for personal data processed via this website is STORREX bv, Steenweg 130 – 202, 3890 Gingelom, Belgium — VAT BE 0883.625.656. Contact us via the contact form, or by post at the address above.
What we process, and why
Forms (launch notifications and support)
If you use the notify-me or contact form, we process the data you enter: your email address, and for support messages optionally your name and the message text. Each submission is stored together with the page you sent it from and the time you sent it.
- Launch notifications: your email address is used to send you the launch notification you asked for, and for nothing else. Legal basis: your consent (Art. 6(1)(a) GDPR). It is deleted after the notification has been sent, or immediately on request.
- Support messages: used to answer your message. Legal basis: legitimate interest in responding to enquiries and steps prior to entering into a contract (Art. 6(1)(b) and (f) GDPR). Kept as long as the conversation requires, then deleted.
In any case, submissions from both forms are deleted automatically no later than 24 months after they are sent.
When a submission is stored, we receive an internal alert email in our own Microsoft 365 mailbox. It names only the website and form the submission came from, the time you sent it, and a reference to the stored submission — nothing you entered.
Anti-spam (Cloudflare Turnstile)
Our forms are protected by Cloudflare Turnstile, running in invisible mode — it verifies in the background and does not present you with a visible challenge. To distinguish people from bots, Cloudflare processes limited technical data for this purpose (such as your IP address and browser characteristics), as described in Cloudflare's Turnstile Privacy Addendum. We deliberately chose Turnstile over alternatives that build advertising profiles. Cloudflare acts as our processor; see also Cloudflare's privacy policy.
Email (Microsoft 365)
Our email runs on Microsoft 365. That covers the internal alert described above and email we exchange with you: when we reply to a support message, for example, your email address and the conversation are kept in our Microsoft 365 mailbox, and deleted with the support message they belong to. Microsoft acts as our processor for that mail, under its Products and Services Data Protection Addendum.
Hosting and server logs
This site is served by Cloudflare Pages. Like any web host, Cloudflare processes connection data (IP addresses, requested URLs) to deliver the site and protect it against attacks. Legal basis: legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
Analytics
If analytics run on this site, they are privacy-friendly and cookieless (Cloudflare Web Analytics): aggregate page-view counts with no cross-site tracking, no fingerprinting for advertising, and no personal profiles.
What about the TRACER365 product?
TRACER365 — the software — runs locally in your own environment. Audit data from your Microsoft 365 tenant is stored on the machine you install it on and never reaches us. There is no vendor cloud in the product's design. Product-specific terms and privacy documentation ship with the product at launch.
International transfers
Cloudflare operates a global network. Where personal data is transferred outside the EU/EEA, Cloudflare relies on recognised safeguards (the EU–US Data Privacy Framework and standard contractual clauses).
Microsoft, which provides our email, relies on standard contractual clauses where personal data is transferred outside the EU/EEA.
Your rights
Under the GDPR you can ask us for access to, rectification or erasure of your personal data, restriction of processing, portability, and you can object to processing based on legitimate interest. Withdrawing consent is as easy as giving it — one email. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit) or your local supervisory authority.
Changes
We will update this policy when the site gains new functionality (for example, when the installer download and checkout go live) and note the date of the last change here.
Last updated: 25 September 2026.