CLOUDEK · PRIVACY

Your privacy,
in plain English.

This notice explains what personal data the Cloudek website and its free tools use, why, who helps us process it, how long we keep it and what you can choose. It describes how the site works today. The trust centre covers data and AI handling in more detail.

Updated · Last reviewed

✓ Google Analytics is off until you accept✓ Most tools stay in your browser✓ AI is opt-in, with a preview
Your rights and contact

Who is responsible

The website cloudekhosting.com is run by Cloudek Hosting Private Limited (“Cloudek”, “we”). We decide why and how the personal data described here is used, so we are the controller. To ask a question or make a request about your data, use the request page and choose “Other IT service enquiry”, or email info@cloudekhosting.com. Please leave passwords, tokens and raw logs out of your message.

What we use, why, and who processes it

WhenDataWhyWho processes it
You use a free toolNothing you paste or drop leaves your browser for most toolsTo give you the resultOnly your browser
You press a DNS or Email Health lookupThe DNS names you look up, plus your IP address as in any web requestTo fetch public DNS records for youCloudflare (public DNS over HTTPS). Cloudek does not receive the results.
You open the IP address lookup and blocklist check toolYour connection’s IP address, read by Cloudek’s API to show it back to you. It is not stored or logged by the API.To show you “what is my IP”Cloudek’s API on Microsoft Azure
You look up an IP address or domain in that toolThe address or domain name and related DNS names (reverse DNS and Team Cymru network owner names), plus your IP address as in any web requestTo fetch public DNS data for youCloudflare (public DNS over HTTPS), which sees the queried address. Team Cymru’s DNS service answers the network owner names.
You choose the blocklist check, or press Check mail serversThe public IP addresses being checked (up to 10). Your IP address is held in memory only to limit how often one connection can use the check.To check the addresses against public DNS blocklistsCloudek’s API on Microsoft Azure, then the DNS servers of the blocklist operators (Spamhaus, SpamCop, PSBL and DroneBL), reached through Azure’s DNS resolver. Cloudek does not store or log the addresses or the results.
You confirm the SSL and TLS check linkThe hostname you enteredTo open a scan page you asked forQualys SSL Labs, after you confirm and open the link
You press “Explain with AI”, or ask the query helper or ticket reply writer for an AI draftThe masked text shown in the preview, up to 6,000 characters, and your IP addressTo write the explanation or draft you asked forCloudek’s API on Microsoft Azure, then OpenAI’s API
You visit a public pageA fixed page ID, with no cookie or identifier (our own counter)To count which pages are usefulCloudek’s counter on Microsoft Azure
You accept analytics and visit a public pagePage address (domain and path only), a fixed page name, and what Google receives with any web request, such as your IP address and browser details, plus Google Analytics cookiesTo measure visits to pagesGoogle Analytics 4 (Google)
You contact us by emailWhat you write, your email address and any details you choose to shareTo reply and to scope the workYour email provider and ours
You send an enquiry from the home page or the request pageYour name, work email, optional company, the service area and environment you choose, an optional time zone, preferred time and outcome message, the page you used, the time, and your IP address for rate limitingTo reply to you and to scope the workCloudek’s API on Microsoft Azure, then Microsoft Azure Communication Services Email and Exchange Online, which deliver it to Cloudek’s mailbox
The site owner signs in to OpsPilotThe owner’s Microsoft sign-inTo restrict OpsPilot to the owner roleAzure Static Web Apps and Microsoft Entra ID

We do not sell personal data, and we do not use it for advertising. Google signals and ad personalisation are turned off in our Google Analytics set-up.

01ANALYTICS AND YOUR CHOICE

Google Analytics only if you accept

When you first visit a public page, a small notice asks whether we may use Google Analytics. Until you press “Accept analytics”, Google Analytics is not loaded and nothing is sent to Google. “Decline” and “Accept analytics” have equal weight, the notice can be closed without choosing (analytics then stays off), and the site works the same either way.

  • If you accept, Google Analytics 4 receives one page-view event with the page address (domain and path only) and a fixed page name. We never send query strings, fragments, referrers, page titles or anything you typed.
  • Google still receives the technical details that come with any web request, such as your IP address and browser details, and sets its own cookies (for example _ga and _ga_ followed by the property ID).
  • To withdraw consent: use “Cookie and privacy settings” in the footer of any page, or the button on this page, and choose “Decline”. We then switch Google Analytics off and ask your browser to delete its cookies for this site. A page that is already open may need a reload.
  • Your choice is saved in your own browser (local storage) and is not sent to us. If your browser blocks storage, the choice only lasts for the page you are on, and analytics stays off by default.
02OUR OWN PAGE COUNTER

An anonymous count, no cookie

Public pages also send one small request to a Cloudek counter hosted on Microsoft Azure. It contains only a page ID from a fixed list. It is sent without cookies or credentials and sets no cookie or visitor ID. The counter keeps daily totals per page and stores no IP address, user agent, referrer or query string. Because this counter stores nothing that identifies you, it keeps running whatever you choose about Google Analytics. Like any web server, Azure receives your IP address as part of the request; Azure’s own platform logs are covered by its terms, not by this counter.

Neither counter runs on the secure-transfer demos, a short list of email-review, email DNS and header pages, or the private owner pages.

03OPTIONAL AI

AI only when you press the button

  • Nothing leaves the page until you press the button. An “exactly what will be sent” box shows the masked text first.
  • The page and our server both mask email addresses, IP addresses, GUIDs, JSON Web Tokens, cookie and authorization header values and long token-like strings. Masking follows fixed patterns and can miss names, internal hostnames or unusual secrets, so read the preview.
  • The text goes from your browser to Cloudek’s API on Microsoft Azure and from there to OpenAI’s API. The model is given no tools. We ask OpenAI not to store the response (store: false); OpenAI may keep API data for a limited period under its own terms, for example for abuse monitoring.
  • Cloudek does not save the text you send or the answer. To apply limits (6 requests per IP address per hour and a daily site-wide cap), the server keeps your IP address and the times of recent requests in memory only. It is not written to a database and is cleared when the day changes or the service restarts.
04ENQUIRIES

The enquiry form emails Cloudek

When you press “Send enquiry” on the home page or the request page, your browser sends the details you typed (name, work email, optional company, service area, environment, optional time zone, preferred time and outcome of up to 1,000 characters) to Cloudek’s API on Microsoft Azure. The API checks them and emails them as plain text, through Microsoft Azure Communication Services Email, to Cloudek’s shared mailbox, which is hosted in Exchange Online. The email asks us to reply to the address you gave. We use what you wrote only to reply and to scope the work. The tick box on the form is your agreement to that use. The website does not store the enquiry, does not send you an automatic email, and the form does not create an account, take a payment or make a booking. A short-lived in-memory counter uses your IP address to limit repeat submissions; it is not stored and is cleared when the day changes or the service restarts. The message itself and your address are not written to our application logs. If sending is unavailable, the page offers an email draft in your own email app instead, and nothing is sent until you send that email. Please do not put passwords, tokens or sensitive data in an enquiry; the form refuses text that looks like a credential. Paid reviews have their own written scope, evidence handling and retention terms, agreed before any access or files are exchanged.

Page feedback. Free tool pages and blog posts end with “Was this helpful?”. If you press Yes, No or “Report a wrong result or error”, your browser sends the page address, your answer, the kind of problem, an optional message of up to 1,000 characters and, only if you choose to give one, your email address and your agreement to a reply, to Cloudek’s API on Microsoft Azure. It is emailed as plain text, through Microsoft Azure Communication Services Email, to the same shared mailbox as enquiries (Exchange Online). There are no public comments, nothing is published, and the website does not store the feedback or send anyone an automatic email. Your email address is used only to reply to that feedback. The same in-memory counter by IP address limits repeat submissions, the message and address are not written to our application logs, and text that looks like a password, key or token is refused. Your Yes or No answer is not sent to Google Analytics. If sending is unavailable, the page offers an email link instead. Please leave passwords, tokens and sensitive data out of feedback.

05OPSPILOT SIGN-IN

For the owner only

OpsPilot is Cloudek’s owner-only workspace and is not open to visitors. Its sign-in page uses the hosted Microsoft Entra sign-in of Azure Static Web Apps, so Microsoft handles the password and Azure Static Web Apps keeps the sign-in session. Visitors to the public site never need to sign in. Customer tenants are not connected through this website.

06YOUR BROWSER

What the site stores on your device

Cloudek’s public pages set no cookies of their own. They store one setting in your browser’s local storage: your analytics choice. The notice also remembers in session storage that you closed it without choosing, until you close the browser tab or window. The free tools do not save what you paste. If you accept analytics, Google adds its own cookies, described above.

How long we keep data

Your choices and rights

About this notice

This is general information about how the public website works as of the review date above. It is not legal advice and does not replace a written agreement for an engagement, which sets its own terms for customer data. We will change this page and its dates when our practices change. Third-party services (Google, Microsoft Azure, OpenAI, Cloudflare, Qualys) handle data under their own terms.