// legal

Privacy policy

Template - please complete and have it checked before going live.

1. Controller

Kurilux Electronics, [address], support@kurilux.com

2. Data we process

  • Orders: name, email, shipping address and order contents to fulfil your purchase (Art. 6(1)(b) GDPR). Retained as required by commercial and tax law.
  • Support requests: name, email, optional serial number and message to answer your request (Art. 6(1)(b)/(f) GDPR).
  • Device registration: serial numbers are linked to your order to provide warranty and support. The public device lookup never shows personal data.
  • Server logs: our hosting provider stores technical access logs (IP address, time, requested page) for security purposes.

3. Cookies

We only use one technically necessary session cookie (for your cart and security tokens). No tracking, no analytics, no third-party fonts.

4. Web flasher (firmware updates over USB)

Only on the device page with the browser flasher, the open-source tool "ESP Web Tools" is loaded from the jsDelivr CDN (cdn.jsdelivr.net). Your browser transmits your IP address to jsDelivr to download it (Art. 6(1)(f) GDPR - providing the update function). The connection to your device happens locally in your browser via Web Serial; no data from your device is sent to us or to third parties.

5. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority.