QuotaSpot Privacy Policy

Effective date: [EFFECTIVE DATE]

This policy explains what personal data is handled when you visit https://radatar.tech, use the free router checker, buy QuotaSpot, email us, or use QuotaSpot Setup and the QuotaSpot portal.

Who we are: Emad Alghail, an independent developer based in Yemen ("we", "us"). Contact for privacy questions: emadalghail60@gmail.com. [SELLER POSTAL ADDRESS - include if your payment partner or local law requires it]

The short version

• Our website uses no cookies, no analytics and no advertising trackers.
• The router checker runs in your browser. We do not see what you search for.
• Payments are handled by our payment partner. We never see your card details.
• QuotaSpot Setup and the QuotaSpot portal never send data to us. There is no account, no licence check and no "phone home".
• The guest data the portal collects stays on your router. You control it, not us.

---

1. Our website

What is collected: like almost every website, our hosting provider, Contabo (a virtual server we run ourselves), automatically records standard server logs when your browser requests a page: your IP address, the date and time, the page requested, your browser type (user agent) and the referring page. We use these logs only to keep the site running and secure, and they are deleted automatically after 14 days.

Cookies and trackers: none. We do not use analytics, advertising pixels, social-media widgets or fingerprinting.

Your theme choice: if you switch between light and dark mode, the website remembers that choice in your own browser's local storage (a setting named qs-theme). It never leaves your device and we cannot read it. You can clear it in your browser settings.

Links to other sites: buttons that open the checkout, OpenWrt's website or other sites take you to those sites, which have their own privacy policies.

2. The router compatibility checker

• The checker runs entirely in your browser. The list of routers is downloaded from our website as one file and your search and choices are not sent to us.
• Router photos are loaded directly from openwrt.org (the OpenWrt wiki). When a photo loads, your browser connects to openwrt.org, which can see your IP address and browser type. We tell your browser not to send openwrt.org the address of our page (no "referrer"). openwrt.org's own privacy policy applies to those requests.
• Links to openwrt.org or the OpenWrt Firmware Selector only open if you click them.

3. Buying QuotaSpot

Payments are processed by our payment partner, Payoneer; we are the seller. Payoneer collects and processes your payment details, billing name and address, email address, country, tax information and IP address under its own privacy policy, which applies to your purchase.

The payment partner shares with us the information we need to deliver and support your order: usually your name, email address, country, the products bought (the QuotaSpot licence and any Remote setup), the order number, the price and tax paid, and the refund status. We use this to:

• deliver your download and updates;
• answer support and refund requests;
• keep business and tax records as required by law;
• prevent fraud and misuse of licences.

We keep order records for as long as we must for tax and accounting purposes ([RECORD RETENTION PERIOD, e.g. the number of years your local law requires]).

We do not send marketing emails unless you have asked for them, and every such email will have a way to unsubscribe. We do not sell or rent your data.

4. Emailing us

If you email emadalghail60@gmail.com (including "tell me when it's ready" emails from the website), we receive your email address, your message and anything you attach. Please do not send us your guests' personal data, router passwords or full router backups unless we specifically need them to solve a problem. Our email is provided by Google (Gmail). We keep support emails for [SUPPORT EMAIL RETENTION, e.g. 2 years] and then delete them, unless we need them for a dispute or legal reason.

Remote screen-sharing (remote help and Remote setup): if you agree to a remote help session, or book the paid Remote setup service, we use [SCREEN-SHARE TOOL], whose own privacy policy applies. To arrange a Remote setup session we use your email address and the date and time we agree.

• What we see: only what is on the screen you share during the session - typically QuotaSpot Setup, the router's pages and the result of the test. Close or hide anything private (email, documents, other browser tabs) before you start sharing.
• Passwords: you type the router and admin passwords yourself. Please do not read them out or send them to us; we do not ask for them and do not write them down.
• What we keep: we do not record sessions [CONFIRM], and we do not keep copies of your router's settings, backups, guest data or files from your computer. The only records we keep are our emails with you and a short note of the order (for example the router model, the date and whether the setup was completed), kept like other support emails.
• What we do not do: we only work on the one router the session is about. We do not open files on your computer or look at your other devices or networks, and we do not stay connected after the session ends. You can stop sharing at any time.

The settings backup that QuotaSpot Setup saves (section 5) is saved on your computer, not sent to us.

On-site setup (Sana'a, Yemen only): if you book on-site setup, we use your contact details and address only to quote for, carry out and invoice that job.

5. QuotaSpot Setup (the desktop app)

QuotaSpot Setup runs on your computer and shows its wizard in your browser at a local address (127.0.0.1) that only your computer can open.

Who it talks to:

• Your router, over SSH on your local network, to install the kit, set the passwords you choose and check the result.
• downloads.openwrt.org (OpenWrt's official download server, over HTTPS), only when you switch a GL.iNet GL-MT3000 or GL-MT6000 to standard OpenWrt, to download the official firmware image. OpenWrt's server can see your IP address.
• During installation, your router downloads the software packages it needs (openNDS, PHP, SQLite and others) from the OpenWrt package servers configured on it. That is the router talking to OpenWrt, not to us.

It never connects to us. It has no telemetry, crash reporting, update check or licence check.

What it saves on your computer:

• When switching firmware, a backup of the router's current settings in a folder called QuotaSpot backups in your home folder. This file can contain your old Wi-Fi names and passwords and other router settings. Keep it safe, and delete it when you no longer need it.
• The downloaded OpenWrt firmware image, in your computer's normal cache folder, so it does not need to be downloaded twice. You can delete it at any time.

The passwords you type into the app are sent to your router to set it up. The app does not save them on your computer.

6. The QuotaSpot portal on your router (your guests' data)

When QuotaSpot is installed, you (the business running the Wi-Fi) decide who gets an account and what is stored. The data is kept only on your router. We cannot see it, have no access to it and do not receive any of it.

What the portal stores on the router:

• for each guest account: username, a hash of the password (not the password itself), daily download and upload allowances, enabled/disabled status, an optional note you write, and the date the account was created;
• daily usage per account (bytes downloaded and uploaded each day, and whether the guest was blocked for the day). By default this history is kept for about 600 days, then deleted automatically. You can change this or delete it sooner;
• which device was signed in with which account: the device's MAC address (a hardware address of the phone or laptop), the username and the sign-in date and time. These records are deleted automatically after about 2 days.

openNDS (the captive-portal software QuotaSpot uses) and the router's system log may also temporarily record the IP and MAC addresses of connected devices, as most routers do.

Your responsibility: for your guests' data you are the "controller" (the person responsible under data-protection laws such as the GDPR, where they apply). That means it is up to you to:

• tell guests what you collect and why (for example with a short notice at the counter or on the login page);
• keep the router and admin panel passwords private;
• only collect what you need (for example, usernames do not have to be real names, and the note field is optional);
• answer guests' requests to see or delete their data;
• check whether local law requires you to keep, or not keep, Wi-Fi usage records (see the Disclaimer).

If you are a technician installing QuotaSpot for a client, the client is normally the controller. Make sure they know this.

7. Where data is processed

We are based in Yemen. Our website host, email provider and payment partner may process data in other countries, including the United States and the European Union, under their own safeguards. [CHECK: list the actual countries once providers are chosen.]

8. Your rights

Depending on where you live, you may have the right to ask us for a copy of your personal data, to correct it, to delete it, to object to or restrict how we use it, or to receive it in a portable format. Email emadalghail60@gmail.com. We may need to confirm your identity. We cannot delete records we must keep by law (such as tax records), and requests about payment data may need to go to our payment partner. You may also complain to the data-protection authority where you live.

Why we may use your data (legal bases, where these apply): to perform our contract with you (delivery, updates, support), to meet legal obligations (tax records), and our legitimate interest in running a secure website and preventing fraud.

9. Children

Our website and products are meant for businesses and adults. We do not knowingly collect data from children.

10. Changes

We may update this policy. The current version and its effective date are always on our website. If a change is significant, we will say so on the website.