This notice explains what personal data the Cloudek website and its free tools use, why, who helps us process it, how long we keep it and what you can choose. It describes how the site works today. The trust centre covers data and AI handling in more detail.
Updated · Last reviewed
✓ Google Analytics is off until you accept✓ Most tools stay in your browser✓ AI is opt-in, with a preview
The website cloudekhosting.com is run by Cloudek Hosting Private Limited (“Cloudek”, “we”). We decide why and how the personal data described here is used, so we are the controller. To ask a question or make a request about your data, use the request page and choose “Other IT service enquiry”, or email info@cloudekhosting.com. Please leave passwords, tokens and raw logs out of your message.
What we use, why, and who processes it
When
Data
Why
Who processes it
You use a free tool
Nothing you paste or drop leaves your browser for most tools
To give you the result
Only your browser
You press a DNS or Email Health lookup
The DNS names you look up, plus your IP address as in any web request
To fetch public DNS records for you
Cloudflare (public DNS over HTTPS). Cloudek does not receive the results.
You confirm the SSL and TLS check link
The hostname you entered
To open a scan page you asked for
Qualys SSL Labs, after you confirm and open the link
You press “Explain with AI”, or ask the query helper or ticket reply writer for an AI draft
The masked text shown in the preview, up to 6,000 characters, and your IP address
To write the explanation or draft you asked for
Cloudek’s API on Microsoft Azure, then OpenAI’s API
You visit a public page
A fixed page ID, with no cookie or identifier (our own counter)
To count which pages are useful
Cloudek’s counter on Microsoft Azure
You accept analytics and visit a public page
Page address (domain and path only), a fixed page name, and what Google receives with any web request, such as your IP address and browser details, plus Google Analytics cookies
To measure visits to pages
Google Analytics 4 (Google)
You contact us by email or from the request page
What you write, your email address and any details you choose to share
To reply and to scope the work
Your email provider and ours
The site owner signs in to OpsPilot
The owner’s Microsoft sign-in
To restrict OpsPilot to the owner role
Azure Static Web Apps and Microsoft Entra ID
We do not sell personal data, and we do not use it for advertising. Google signals and ad personalisation are turned off in our Google Analytics set-up.
01ANALYTICS AND YOUR CHOICE
Google Analytics only if you accept
When you first visit a public page, a small notice asks whether we may use Google Analytics. Until you press “Accept analytics”, Google Analytics is not loaded and nothing is sent to Google. “Decline” and “Accept analytics” have equal weight, the notice can be closed without choosing (analytics then stays off), and the site works the same either way.
If you accept, Google Analytics 4 receives one page-view event with the page address (domain and path only) and a fixed page name. We never send query strings, fragments, referrers, page titles or anything you typed.
Google still receives the technical details that come with any web request, such as your IP address and browser details, and sets its own cookies (for example _ga and _ga_ followed by the property ID).
To withdraw consent: use “Cookie and privacy settings” in the footer of any page, or the button on this page, and choose “Decline”. We then switch Google Analytics off and ask your browser to delete its cookies for this site. A page that is already open may need a reload.
Your choice is saved in your own browser (local storage) and is not sent to us. If your browser blocks storage, the choice only lasts for the page you are on, and analytics stays off by default.
02OUR OWN PAGE COUNTER
An anonymous count, no cookie
Public pages also send one small request to a Cloudek counter hosted on Microsoft Azure. It contains only a page ID from a fixed list. It is sent without cookies or credentials and sets no cookie or visitor ID. The counter keeps daily totals per page and stores no IP address, user agent, referrer or query string. Because this counter stores nothing that identifies you, it keeps running whatever you choose about Google Analytics. Like any web server, Azure receives your IP address as part of the request; Azure’s own platform logs are covered by its terms, not by this counter.
Neither counter runs on the secure-transfer demos, a short list of email-review, email DNS and header pages, or the private owner pages.
03OPTIONAL AI
AI only when you press the button
Nothing leaves the page until you press the button. An “exactly what will be sent” box shows the masked text first.
The page and our server both mask email addresses, IP addresses, GUIDs, JSON Web Tokens, cookie and authorization header values and long token-like strings. Masking follows fixed patterns and can miss names, internal hostnames or unusual secrets, so read the preview.
The text goes from your browser to Cloudek’s API on Microsoft Azure and from there to OpenAI’s API. The model is given no tools. We ask OpenAI not to store the response (store: false); OpenAI may keep API data for a limited period under its own terms, for example for abuse monitoring.
Cloudek does not save the text you send or the answer. To apply limits (6 requests per IP address per hour and a daily site-wide cap), the server keeps your IP address and the times of recent requests in memory only. It is not written to a database and is cleared when the day changes or the service restarts.
04ENQUIRIES
The request form sends nothing
The request page works inside your browser. It collects a service area, a broad environment and an optional short outcome, then opens a draft in your own email app. Nothing is submitted to Cloudek until you send that email. When you do, we use what you wrote to reply and to scope the work. Paid reviews have their own written scope, evidence handling and retention terms, agreed before any access or files are exchanged.
05OPSPILOT SIGN-IN
For the owner only
OpsPilot is Cloudek’s owner-only workspace and is not open to visitors. Its sign-in page uses the hosted Microsoft Entra sign-in of Azure Static Web Apps, so Microsoft handles the password and Azure Static Web Apps keeps the sign-in session. Visitors to the public site never need to sign in. Customer tenants are not connected through this website.
06YOUR BROWSER
What the site stores on your device
Cloudek’s public pages set no cookies of their own. They store one setting in your browser’s local storage: your analytics choice. The notice also remembers in session storage that you closed it without choosing, until you close the browser tab or window. The free tools do not save what you paste. If you accept analytics, Google adds its own cookies, described above.
How long we keep data
Tool inputs and AI requests: Cloudek does not store them. Your browser keeps pasted text only while the page is open.
The AI rate-limit counter: in memory only, cleared when the day changes or the service restarts.
Our page counter: daily totals per page ID, which are not tied to you.
Enquiries and emails: retained only as long as needed to reply, to scope and deliver any agreed work and to meet our obligations. Paid reviews set their own retention in the written scope.
Google Analytics, OpenAI, Cloudflare and Azure: these providers keep data under their own terms and settings. We have not set out their periods here.
Your choices and rights
Analytics: accept or decline, and change your mind at any time from “Cookie and privacy settings” in the footer.
AI: do not press the AI button and nothing is sent. You can also block analytics with browser settings or a content blocker; the tools keep working.
Your information: you can ask what personal data we hold about you, ask us to correct or delete it, and ask us to stop using it. Depending on where you live, the law may give you further rights, and we will handle your request under the law that applies to us.
How to ask: use the request page and choose “Other IT service enquiry”, or email info@cloudekhosting.com. We may need to confirm who you are before we act on a request about your data.
About this notice
This is general information about how the public website works as of the review date above. It is not legal advice and does not replace a written agreement for an engagement, which sets its own terms for customer data. We will change this page and its dates when our practices change. Third-party services (Google, Microsoft Azure, OpenAI, Cloudflare, Qualys) handle data under their own terms.
