Sanarwar sirri
An sabunta ƙarshe 2 ga Oktoba 2026
An samar da wannan fassara don sauƙaƙawa. Sigar Turanci ita ce mai ɗaurewa.
Wannan sanarwa tana bayyana bayanan sirri da AddToThese ke tattarawa, dalilin tattara su, tsawon lokacin da muke ajiye su da haƙƙoƙin da kake da su. Nordic Byte LTD ce ke gudanar da AddToThese, kamfani da aka yi wa rajista a England and Wales (lambar kamfani 16978110), ofishin rajista a 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Nordic Byte LTD ita ce mai kula da bayanai (data controller). Tuntuɓa: info@nordicbyte.co.uk.
Abin da muke tattarawa
| Bayanai | Dalili | Tushen doka |
|---|---|---|
| Adireshin imel, suna, hash na kalmar sirri (Argon2id) | Don ƙirƙira da kare asusunka da aika imel na sabis kamar sake saita kalmar sirri | Kwangila |
| ID na asusun Google ko GitHub da imel ɗin da aka tabbatar, idan ka shiga da su | Don shigar da kai | Kwangila |
| Sirrin tantancewa ta matakai biyu da lambobin dawo da asusu da aka yi hash, idan ka kunna 2FA | Don kare asusunka | Kwangila |
| Rajistar ayyuka: shiga da canje-canjen asusu, tare da adireshin IP da user agent na browser | Tsaro da binciken cin zarafi; ana nuna maka a shafin Tsaro | Halaltattun buƙatu (legitimate interests) |
| Kasancewa cikin ƙungiya: idan ka shiga ƙungiya, mai ita na ganin sunanka da adireshin imel ɗinka; idan ka gayyaci wani, muna ajiye imel ɗinsa na kwana 7 don aika gayyatar | Don gudanar da tsarin Team | Kwangila; halaltattun buƙatu ga waɗanda aka gayyata |
| Endpoints, domain na kanka, sunayen API token da lokutan amfani na ƙarshe | Don gudanar da sabis ɗin da ka saita | Kwangila |
| Ƙididdigar amfani: bytes da aka tura da yawan buƙatu a kowane wata | Don aiwatar da iyakokin tsari da nuna maka amfaninka | Kwangila |
| ID na abokin ciniki da na biyan kuɗi na Stripe da matsayinsu | Don karɓar kuɗin tsare-tsaren da ake biya | Kwangila; wajibcin doka don bayanan lissafi |
| Cookie na zama (session) da cookie na CSRF | Don ci gaba da shigar da kai da kare fom. Dukansu tilas ne; ba ma amfani da cookies na nazari ko talla | Halaltattun buƙatu |
| Imel na baƙi zuwa URLs da aka kare da lambobin imel, da lambobin amfani sau ɗaya da aka aika musu | Don barin mutanen da mai URL ya yarda da su kaɗai su shiga. Muna sarrafa waɗannan a madadin mai URL, wanda shi ne ke yanke shawarar wanda aka yarda da shi. | Halaltattun buƙatu (tsaron mai URL); ana share lambobin cikin kwana ɗaya |
Zirga-zirga ta cikin tunnels ɗinka
Buƙatun zuwa URLs ɗinka na jama'a na wucewa ta sabobinmu zuwa kwamfutarka. Ba ma adana jikin buƙatu ko amsoshi. Proxy da sabar yanar gizonmu na ajiye rajistar fasaha na ɗan gajeren lokaci (lokaci, host, path, matsayi, IP na abokin hulɗa) don gudanar da sabis da magance rahotannin cin zarafi. Kai ke da alhakin duk wani bayanan sirri da sabis ɗinka ke sarrafawa.
Waɗanda muke raba su da su
Ba ma sayar da bayanan sirri. Muna amfani da waɗannan masu sarrafa bayanai (processors):
- Stripe don biyan kuɗi. Bayanan kati na zuwa Stripe kai tsaye kuma ba sa taɓa isa sabobinmu.
- Bunny.net (BunnyWay d.o.o., Slovenia) don DNS da cibiyar isar da abun ciki (CDN) da ke gaban wannan shafin.
- Mai ba mu hosting don sabar da ke gudanar da AddToThese, wadda ke cikin Yankin Tattalin Arzikin Turai (EEA).
- Google da GitHub, sai idan ka zaɓi shiga da su.
- Let's Encrypt, wanda ke rubuta sunayen domain da muke nema wa takardun shaida, ciki har da domain na kanka.
Inda bayanai suka fita daga UK ko EEA (misali zuwa Stripe ko GitHub a Amurka), canja wurin ya dogara ne da UK International Data Transfer Addendum ko EU Standard Contractual Clauses da waɗannan masu bayarwa ke samarwa.
Tsawon lokacin da muke ajiye su
- Bayanan asusu: muddin asusunka yana nan. Bayan ka nemi mu goge shi, cikin kwana 30, sai abin da batutuwan da ke biye suka buƙata.
- Shigarwar rajistar ayyuka: wata 12, sannan a goge su kai tsaye.
- Zaman da suka ƙare da hanyoyin sake saita kalmar sirri: ana goge su kai tsaye.
- Bayanan biyan kuɗi: shekara 6, kamar yadda dokar lissafi ta UK ta buƙata.
- Ajiyar database (backups): kwana 30 a jere.
Haƙƙoƙinka
Ƙarƙashin UK GDPR, da EU GDPR inda ya shafe ka, za ka iya neman kwafin bayananka, ka nemi mu gyara ko goge su, ka ƙi ko ka taƙaita sarrafa da aka dogara da halaltattun buƙatu, ka kuma nemi bayananka a tsarin da za a iya ɗauka. Rubuta zuwa info@nordicbyte.co.uk daga adireshin imel na asusunka kuma za mu amsa cikin wata ɗaya. Idan amsarmu ba ta gamsar da kai ba, za ka iya kai ƙara ga UK Information Commissioner's Office a ico.org.uk, ko ga hukumar kare bayanai ta inda kake zaune.
Tsaro
Ana yi wa kalmomin sirri hash da Argon2id, ana adana API tokens a hash, duk zirga-zirga zuwa shafinmu na amfani da HTTPS, kuma tantancewa ta matakai biyu na samuwa a kowane tsari.
Canje-canje
Idan muka canza wannan sanarwa ta hanyar da ke da muhimmanci, za mu aika wa masu asusu imel kafin canjin ya fara aiki.