Privacy notice

ShieldLens Pro is a product of Elevian.io (“we”, “us”). The marketing site you are on lives at shieldlens.elevian.io. The ShieldLens product itself is self-hosted on your hardware and is covered by a separate notice in the install guide.

Contact for any privacy matter: hello@elevian.io.

• When you request a trial via /download: your name, work email, company, country, optional firewall vendor and device count, your IP address and user agent, and any UTM parameters that brought you here.
• When you visit any page: standard server logs (IP, user agent, requested URL, timestamp) for a short retention window so we can investigate incidents.
• If Cloudflare Turnstile is active on the trial form, it sets a short-lived cookie on the challenges.cloudflare.com origin for bot detection. We never read that cookie.
• An sl_admin session cookie is set only if you sign into the admin panel — it’s an HMAC-signed credential we use to recognise admins.

We do not embed Google Analytics, Meta Pixel, or any third-party tracking scripts. The ShieldLens product itself runs offline and ships zero telemetry — that promise extends to this site.

• Performance of a request (Art. 6(1)(b)) — to issue you a trial download link and manage the trial.
• Legitimate interests (Art. 6(1)(f)) — to keep the site secure (rate-limit logs, spam protection) and to follow up about your trial.
• Consent (Art. 6(1)(a)) — for any future marketing email outside the scope of your trial. We don’t opt you into newsletters by default.

• Trial requests: 24 months from your last interaction, then deleted.
• Download tokens: expire 7 days after issue and are removed from storage.
• Server logs: 30 days for security, then deleted.

Your data is stored in services we operate (Vercel for the site, Upstash Redis for lead records, Microsoft 365 for the email that gets sent to you and to us). We do not sell, rent or share it with third parties for advertising. We will disclose it only when required by law in the jurisdictions where we operate.

Under GDPR, UK-GDPR and similar laws you can ask us to:

• show you what we have on file about you,
• correct anything that’s wrong,
• delete your record entirely,
• port your record to another provider,
• stop processing it for marketing.

Email hello@elevian.io and we’ll respond within 30 days. You can also complain to your data-protection authority.

We may update this page over time. The “last updated” date at the top will change when we do. For material changes we’ll email you if we have your address.