Legal
Privacy Policy
Last updated: 13 May 2026
Data controller
Lambdix is operated from Greece. Contact: contact@lambdix.com.
What we collect
- Email address (for account login and transactional emails)
- Hashed password (we never see it in plain text)
- Browser cookies set by Supabase for session management (essential only)
- Server logs (IP, user agent, timestamp) retained 30 days for abuse prevention
We do not use tracking or advertising cookies. We do not sell or share your data with third parties for marketing.
Why we collect it
- Authenticate your account
- Provide and improve the service
- Detect and prevent fraud or abuse
- Comply with legal obligations
Legal basis (GDPR Article 6)
Performance of contract (account and service) and legitimate interests (security and fraud prevention).
Sub-processors
- Supabase — authentication and database hosting
- Vercel — application hosting
- Cloudflare — DNS
Your rights (GDPR)
You can request access, correction, export, or deletion of your data by emailing us at contact@lambdix.com. We respond within 30 days. You may also lodge a complaint with the Hellenic Data Protection Authority.
Data retention
Account data is removed within 30 days of account deletion. Records may be retained longer where required by Greek law.
Changes
Material changes will be announced via email at least 14 days in advance.