Privacy Policy
This policy explains what Mailiondev Technology Ltd does with personal data when you use TryNoBot, and when TryNoBot runs on a site you visit.
Last updated 20 September 2026
Our two roles
For account, billing and support data we are the controller — we decide how it is used. For traffic data collected by the tracker on a customer's website, our customer is the controller and we are their processor: we handle it on their instructions and for no purpose of our own. If you are a visitor to a site running TryNoBot and want your data removed, contact that site's operator; contact us and we will help them act.
Data we collect about visitors
To tell a real person from automation we process: IP address and what it resolves to (country, network, whether it is a datacenter, proxy or VPN), user-agent and derived device, browser and OS, a browser fingerprint, TLS fingerprints (JA3/JA4), page and referrer, and interaction signals such as pointer movement, scrolling and typing cadence — recorded as characteristics of the movement, not as the content typed. We do not collect form contents, passwords or payment details through the tracker.
Data we collect about customers
Name, email, password hash, workspace and team membership, plan and payment records from our payment provider, support correspondence, and the email address of anyone who requests a Bot Check report.
Why we are allowed to process it
Traffic signals are processed on the basis of legitimate interests — our customers' interest in preventing fraud and abuse against their own sites, and ours in running a secure service. We have weighed that against visitors' interests; the data is limited to what detection requires and is never used to build advertising profiles or sold. Account and billing data is processed to perform our contract with you, and marketing email is sent with consent, which you can withdraw at any time.
Cookies and similar technologies
The tracker stores an identifier so repeat visits can be recognised — that is what makes bot detection work. On our own marketing site we use analytics and advertising cookies only if you accept them: the consent banner defaults to denied, and declining leaves only what the site needs to function.
Who we share it with
Service providers who process data on our behalf, under contract: our hosting and network providers, our email provider (Resend), our payment provider (Bachs), and IP reputation providers used in scoring (including IPQualityScore). We do not sell personal data or share it for cross-context behavioural advertising. We disclose data to authorities only where legally required.
International transfers
Our providers may process data outside your country, including in the United States. Where data protected by UK or EU law is transferred, we rely on the appropriate safeguards those laws require, such as standard contractual clauses.
How long we keep it
Traffic data is retained for the window attached to the customer's plan, then deleted automatically. Account and billing records are kept while the account is open and afterwards only as long as tax and accounting law requires. Bot Check lead records are kept until you ask us to delete them; an unsubscribe is kept permanently so we can honour it.
Your rights
Depending on where you live you may have rights to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. UK and EU residents may complain to their supervisory authority — in the UK, the Information Commissioner's Office. Canadian residents have rights under PIPEDA and may complain to the Office of the Privacy Commissioner. Australian residents have rights under the Privacy Act 1988 and may complain to the OAIC. California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.
Marketing email
If you asked us for a Bot Check report we may follow up about it. Every such email identifies us, carries our postal address and has a working unsubscribe link; one click stops all of it immediately.
Security
Data is encrypted in transit. Access to production data is restricted to staff who need it. No system is perfectly secure, and we will notify affected people and regulators where the law requires it.
Contact
Privacy questions and rights requests: [email protected]. Postal: Mailiondev Technology Ltd · RC 9233525.