Last updated: 1 October 2026.
Who is responsible
The data controller is FUSSEC Services LLC (Fusion Security), a limited liability company organized in New Mexico, United States, 6820 S Stemmons Fwy, Ste 115 #2008, Corinth, TX 76210, USA, contact: privacy@pqcstatus.com.
What we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Domain you scan and the technical results | Run the scan, show and share the result, avoid repeated scans | Legitimate interest (providing the service you request) | 12 months |
| A keyed hash of your IP address (the IP itself is never stored) | Rate limiting and abuse prevention | Legitimate interest (security of the service) | Counters: 10 minutes to 1 hour. Hash attached to a scan: 12 months |
| E-mail address, language, consent date and version | Send the monthly briefing you asked for | Consent, confirmed by e-mail (double opt-in) | Until you unsubscribe; unconfirmed sign-ups deleted after 30 days |
| Order data: e-mail, company, domains, billing details (collected by Stripe) | Deliver the report you bought, invoicing | Performance of the contract; legal obligation (accounting) | Report and order data: 12 months. Invoices: kept by Stripe and us for the legal accounting period |
| Your IP address, only to detect your country (DB-IP database hosted on our server) | Show the observatory figures and regulations of your country on the home page | Legitimate interest (relevant content) | Not stored: used for the request only |
What we do not do
- No cookies, no analytics, no advertising or social-media trackers, no third-party scripts or fonts.
- No access logs recording visitors' IP addresses.
- No sale or sharing of your data for marketing.
Processors
Hosting: Contabo GmbH (Germany), servers in France. E-mail delivery: Resend, Inc. (United States). Payments: Stripe Payments Europe Ltd (Ireland). They act on our instructions under a data processing agreement. Our servers and the data they store remain in the European Union; e-mail delivery may involve a transfer to the United States, covered by the European Commission's standard contractual clauses.
Your rights
You can access, correct or delete your data, object to its processing, and withdraw your consent at any time with the unsubscribe link in every e-mail. Write to privacy@pqcstatus.com. You may also lodge a complaint with your data protection authority (in France, the CNIL).