Privacy
Privacy notice
Last changed .
What Butlerito Apps (apps.butlerito.com) keeps about you, why, on what legal basis, for how long, who helps us, and your rights. It describes what the site's code does today.
Who is responsible
Surge Software EOOD (Сърдж Софтуер ЕООД), a single-member limited liability company registered in Bulgaria, UIC (ЕИК) 208837172, registered office zh.k. Krasna Polyana III, ul. Pchinya 31A, 1330 Sofia, Bulgaria, is the controller of the personal data described here.
For anything about your data, write to privacy@butlerito.com.
The short version
- You can read every public page without an account. Reading sets no cookie.
- Our database keeps no IP address and no browser details.
- If you sign in, we keep your email address encrypted, so we can send you sign-in links and decisions about your listings.
- No ads, no trackers, no third-party scripts, and we never sell or rent data.
- You never have to give us personal data. Without an email address you cannot sign in or send a listing; reading the site and reporting a page work without one.
What we keep, why, and for how long
The site applies the periods below automatically. Its clean-up runs every few hours while the site is in use.
Reading the site
What. When your browser asks for a page, Cloudflare, which hosts the site, receives your IP address and the usual request details, such as the page address and the browser's user agent. Our code reads the user agent only to leave bots out of the page counts, and does not store it.
Why and legal basis. To deliver pages and to protect the site from attacks: our legitimate interest in running a secure website (GDPR Article 6(1)(f)).
How long. Our database keeps none of it. Cloudflare handles request data as our provider (see "Who helps us").
Page counts, without cookies
What. When a page loads, it tells our server the page path and, if the link carried one, a short campaign tag (the ?c= part). We add 1 to a counter for that day, page and tag. There is no IP address, no user agent, no identifier and no cookie in it. A path to a listing that is not public is counted under a placeholder, never its name. Prefetches and requests that look like bots are not counted.
Why and legal basis. To see which pages are used: our legitimate interest (Article 6(1)(f)). The counters are day totals and cannot be linked to a person.
How long. 400 days, then the daily rows are deleted.
Signing in
What. Your email address, stored encrypted (AES-GCM), and a keyed hash of it so we can find your account without reading the address. When the account was created, when you first used a sign-in link, and when you last confirmed you are 18 or older and accept the terms. For each sign-in link, only a SHA-256 hash of its one-time code, valid for 30 minutes. For each signed-in browser, a cookie named __Host-picks_s holding a random value; we store only its hash. It lasts 30 days.
Why and legal basis. To let you sign in without a password and to email you about your listings: performing our agreement with you (Article 6(1)(b)).
How long. Your account stays until you delete it. Sign-in links are deleted once they expire, and sessions when they expire or when you sign out. If the first sign-in link for a new address is never used, that new account record is deleted after 24 hours.
Listings you send
What. The listing: its name, who it is for, the one job, what would make it fail, the job category, the language, the price word and the links you give. For web apps, the test steps, which only the editor sees. A record of every status change: who made it (you or the editor), when, and any reason and note.
Why and legal basis. To check the listing, publish it if it passes and tell you the outcome: performing our agreement with you (Article 6(1)(b)). The decision record also serves our duties under the EU Digital Services Act (Article 6(1)(c)) and our legitimate interest in a reliable record of moderation (Article 6(1)(f)).
How long.
- Test steps are deleted when the listing is published, turned down or withdrawn.
- A published listing is public until it is withdrawn, by you or by us.
- When you delete your account, every listing of yours that is not public (drafts, queued, turned down or withdrawn) is erased with its decision record. Published listings stay public but are no longer linked to you. If you want them gone too, withdraw them first, then delete your account.
- Otherwise your listings and their records stay while your account exists.
Reports about a page
What. The page address, the reason, your explanation and your good-faith statement. If you give them, your name and email address, both stored encrypted. We do not store your IP address with a report.
Why and legal basis. To handle notices about illegal content, confirm we received them and tell you our decision: a legal obligation under Article 16 of the EU Digital Services Act (Article 6(1)(c)). For reports that are only about our listing rules: our legitimate interest in a directory that is accurate and safe (Article 6(1)(f)).
How long. Your name and email are deleted 183 days (about six months) after the decision, and the rest of the report 730 days (two years) after it. A report still waiting for a decision is kept until it is decided.
Protection against floods of requests
What. To stop floods of sign-in requests and reports, we count requests in short time windows under a key computed with a secret (an HMAC) from your IP address, and for sign-in and report receipts also from the keyed hash of the email. The IP address and the email are never stored in these counters. One address gets at most three report receipts an hour.
Why and legal basis. Security: our legitimate interest (Article 6(1)(f)).
How long. A counter is kept for its time window (one minute, or one hour for report receipts) plus up to about an hour. The next sign-in request or report deletes old counters, and the clean-up removes any that are left.
Emails we send
Sign-in links; decisions on your listings, with the reasons; notices about changes to the terms or the closing of the service, if you have an account; and, if you reported a page and left an email, a confirmation and our decision. They are sent through Resend (see below), on the same legal basis as the purpose each one serves. Butlerito Apps sends no newsletters or marketing. Our emails carry no images and no tracking pixels, and their links are not tracked.
Emails you send us
If you write to hello@butlerito.com, privacy@butlerito.com or abuse@butlerito.com, we use your message to answer you and keep it as long as we need for that request and any follow-up. Legal basis: our legitimate interest in answering (Article 6(1)(f)), or a legal obligation when the message is a request under data protection law or the Digital Services Act (Article 6(1)(c)). These messages are handled by our email hosting provider.
Who helps us
- Cloudflare, Inc. (United States) hosts the site, its database and its cache, protects it from attacks and handles the editor's sign-in to the admin area (Cloudflare Access). The database is set up in Cloudflare's EU jurisdiction, so it is stored in the EU; pages are served from Cloudflare's data centres around the world. Cloudflare is certified under the EU–US Data Privacy Framework, and its data processing addendum includes the EU Standard Contractual Clauses. Cloudflare's privacy policy.
- Resend (Plus Five Five, Inc., United States) sends our emails, from its EU region. Its data processing addendum relies on the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. Resend's privacy policy.
We share personal data with no one else, unless the law requires it, for example an order from a court or an authority.
Cookies
Our only cookie is __Host-picks_s, set when you sign in and needed to keep you signed in. Because it is strictly necessary, there is no cookie banner. Reading the site sets no cookie of ours and stores nothing in your browser. Cloudflare, which protects the site, may set its own security cookies, for example when its protection checks or challenges a browser that looks automated, and for the editor's sign-in to the admin area. Cloudflare describes these as strictly necessary for security.
Decisions made by a person
No decision about you is made by automated means alone. The forms check a few things automatically, for example that a store link points at Google Play or the App Store and that a web app is on its own domain. A failed check only keeps the listing as a draft, with the reason shown, so you can fix it. A person decides whether a listing is published, turned down or taken down. We do no profiling.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, or to have the data you gave us in a portable format. You can object to any use based on our legitimate interest. Much of this you can do yourself on your page: edit a draft, withdraw a listing, or delete your account. For anything else, write to privacy@butlerito.com from the address concerned. We answer within one month; if a request is complex we may take up to two more months and will tell you why. It is free. We may ask you to confirm the request comes from you.
You can complain to the Commission for Personal Data Protection (КЗЛД / CPDP), 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, Bulgaria, www.cpdp.bg, or to the data protection authority where you live or work.
Age
Butlerito Apps is for people aged 18 or over, and sign-in asks you to confirm it. We do not knowingly keep data about children. If you think a child has signed up, write to privacy@butlerito.com and we will delete the account.
Security
Every page is served over HTTPS only. Email addresses and report contacts are encrypted in the database. Sign-in codes and cookies are stored only as hashes. The editor's area sits behind Cloudflare Access.
Changes
When this notice changes, the date at the top changes. The terms say how we tell people with an account about changes that affect them.