Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains how Dilluted Cron Requests ("DCR", "we", "us", or "our") handles personal information when you visit our website or use our scheduled HTTP request service. We process personal data in accordance with applicable data protection law, including the EU General Data Protection Regulation (GDPR) and applicable Romanian law.

1. Who is responsible

The website and service operator is . Business address: .

For privacy enquiries or to exercise your data protection rights, contact us using the following details: .

We act as the controller for personal data we process to operate DCR, manage accounts, provide customer support, secure the service, and administer subscriptions, to the extent that we determine the purposes and means of that processing.

2. Information we collect

Depending on how you use DCR, we may process the following categories of information:

• Account information: your email address, account identifier, authentication-related information, account status, and account preferences.
• Service configuration: scheduled job definitions, endpoint URLs, request methods, schedules, headers, request bodies, and other configuration you choose to provide.
• Execution and diagnostic data: execution timestamps, HTTP status codes, response information, error messages, delivery outcomes, and technical logs needed to operate and troubleshoot scheduled requests.
• Subscription information: selected plan, subscription status, billing period, transaction references, and payment-related notifications supplied by our checkout provider.
• Communications: information you include when contacting us for support or making a privacy request.
• Technical information: IP address, browser and device information, request timestamps, and security events that may be recorded by our hosting or infrastructure providers.

Please do not include passwords, access tokens, personal information, or other confidential material in endpoint configurations unless it is necessary for your intended use. You are responsible for ensuring that you are authorized to submit and process information included in your configured requests.

3. How we use information and our legal bases

We process personal information for the following purposes and, where required, on the following legal bases:

• Providing DCR: creating and managing accounts, scheduling HTTP requests, recording results, and delivering service features. Legal basis: performance of our contract with you.
• Managing subscriptions: checking plan status, enabling paid features, processing cancellation requests, and coordinating billing issues with our checkout provider. Legal basis: performance of our contract and compliance with legal obligations where applicable.
• Security and abuse prevention: protecting accounts and infrastructure, investigating suspicious activity, and preventing misuse. Legal basis: our legitimate interests in operating a secure service, subject to your rights and interests.
• Customer support: responding to questions, complaints, and account requests. Legal basis: performance of our contract, our legitimate interests, or compliance with legal obligations, depending on the request.
• Accounting and legal compliance: maintaining records and responding to lawful requests. Legal basis: compliance with legal obligations.
• Website delivery: delivering pages, loading fonts, and maintaining the availability and security of the website. Legal basis: our legitimate interests and, where required, your consent for any non-essential technologies.

Where we rely on legitimate interests, you may object to processing in circumstances provided by applicable law. Where consent is required, you may withdraw it without affecting processing that took place before withdrawal.

4. Account email addresses and checkout

When you select a subscription plan or initiate a checkout flow, the website may temporarily hold your email address in memory and pass it to the configured external checkout service. Depending on the checkout integration, the email address and selected plan may be included in a checkout URL or transmitted through another checkout mechanism.

Information placed in a URL may be visible in browser history, server logs, or other systems that handle the URL. We will use an integration that avoids exposing personal information in URLs where reasonably practicable. You should review the checkout page and the provider's privacy information before submitting payment details.

Payments are handled through Creem.io. Creem may process buyer information, payment information, transaction records, and related information under its own terms and privacy notice. The exact roles and responsibilities of DCR and Creem depend on the processing activity and the checkout arrangement. Please review Creem's Privacy Notice and Buyer Terms.

DCR does not intend to collect or store full payment card details on its own servers. Payment information should be submitted directly through the checkout provider's approved payment interface.

5. Scheduled requests and endpoint data

DCR processes the endpoint URLs and request configuration you submit to execute your scheduled HTTP requests. Depending on your configuration and the features you use, this may include headers, credentials, request bodies, response status codes, response content, and failure details.

Endpoint configurations may contain personal data or confidential information belonging to you or third parties. You should only submit information you are authorized to use and should avoid placing sensitive data in request or response fields unless necessary. Access to stored information should be limited to what is needed to operate, secure, and support DCR.

6. Data retention and account deletion

Our intended default is to retain account and service data for as long as your account remains active, unless a shorter retention period is required for a particular category of information. We do not promise to retain every category of personal data indefinitely.

You may request deletion of your account at any time using the account deletion functionality provided by DCR or by contacting support. When an account is deleted, we will delete or irreversibly anonymize personal data associated with that account within a reasonable period, subject to applicable law, technical backup cycles, security needs, and the exceptions described below.

Some information may need to be retained after account deletion where necessary to comply with tax, accounting, payment, fraud-prevention, dispute-resolution, or other legal obligations; establish or defend legal claims; or maintain essential security records. Such information will be restricted to the applicable purpose and retained only for the period reasonably required. Backup copies may persist temporarily until overwritten or securely deleted in the ordinary backup cycle.

Creem and other independent service providers may retain transaction and payment records under their own legal obligations and retention policies. Deleting your DCR account does not automatically delete records that those providers are required or independently entitled to retain.

7. Sharing and recipients

We may share relevant information with the following categories of recipients when necessary:

• Creem.io: checkout, payment processing, subscription administration, fraud prevention, and transaction-related functions.
• Hosting and infrastructure providers: hosting the website and service, storing data, operating scheduled jobs, and maintaining system security.
• Technical service providers: monitoring, email delivery, error reporting, backups, and customer support, where such services are actually used.
• Authorities and professional advisers: where disclosure is required by law or reasonably necessary to establish, exercise, or defend legal claims.

We do not sell your personal information. We do not use personal information for third-party targeted advertising. We do not share personal data with a provider for a purpose unrelated to operating DCR unless permitted by law.

8. Hosting, fonts, cookies, and similar technologies

Our hosting and infrastructure providers may process technical request data, including IP addresses, timestamps, and browser information, to deliver the website, maintain availability, and protect against abuse.

The website may load fonts from Google Fonts. When your browser requests these fonts, Google may receive technical information such as your IP address and browser request data. For more information, see Google's Privacy Policy. System fonts or locally hosted fonts may be used instead where appropriate.

DCR's website is intended not to use advertising cookies or analytics trackers unless this policy and any required consent mechanism are updated. Essential technologies may be used where necessary for security, authentication, or core functionality. Hosting-level logs and security telemetry may still exist even if the website itself does not set analytics cookies or use browser local storage.

9. International transfers

Some service providers may process personal data outside Romania or the European Economic Area. Where a transfer is subject to GDPR Chapter V, we will ensure that an applicable transfer mechanism and required safeguards are in place, such as an adequacy decision or appropriate contractual safeguards. Information about relevant safeguards may be requested using our privacy contact details.

10. Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, alteration, and disclosure. No online service or transmission method can be guaranteed to be completely secure. You are responsible for protecting your account credentials and for ensuring that secrets included in your scheduled requests are managed appropriately.

11. Your data protection rights

Subject to applicable law and any relevant exceptions, you may have the right to:

• request access to your personal data and obtain a copy;
• request correction of inaccurate or incomplete information;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact us using the privacy contact details published on our website. We may need to verify your identity before responding. We will respond within the period required by applicable law.

If you are in Romania, you may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP). You may also have the right to lodge a complaint with the supervisory authority in your habitual residence, place of work, or place of the alleged infringement within the EU.

12. Children's privacy

DCR is intended for people who are legally able to enter into a binding agreement. The service is not directed at children, and we do not knowingly collect children's personal data in violation of applicable law. If you believe a child has provided personal data unlawfully, contact us so that we can assess and address the request.

13. Changes to this policy

We may update this Privacy Policy when our service, providers, data practices, or legal obligations change. The revised policy will be published on this page with an updated date. Where required by law, we will provide additional notice or obtain consent before making material changes to processing based on consent.

14. Contact

For privacy questions, data requests, or complaints, contact: .