Demi Prince

← Back to the website

Privacy Policy

Last updated: 7 November 2026

This policy explains what personal data demiprince.com collects, why, and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and Kosovo Law No. 06/L-082 on the Protection of Personal Data.

1. Who is responsible

The controller is Demi Prince, an independent cybersecurity consultant based in Kosovo who runs this website. You can reach me through the contact form or the WhatsApp button on this website.

2. What data I collect

  • Contact form: your name, email address or WhatsApp number, the platform, the type of problem, the account username or link (optional), your message and the language you selected.
  • WhatsApp: if you tap the WhatsApp button, you leave this website and the chat runs on WhatsApp (Meta). I then receive your phone number, your WhatsApp profile name and the messages you send.
  • Technical data: the hosting provider records server logs (IP address, date and time, requested page, browser type) to run and protect the website. To block spam, the contact form keeps a one-way hash of your IP address for up to 10 minutes.
  • Language preference: saved only in your own browser. See the Cookie Policy.

This website uses no analytics, no advertising trackers and no social media plugins. Fonts are served from this server, not from Google.

3. Why I use your data and the legal basis

  • To answer your request and carry out the service you ask for: steps before a contract and performance of a contract (GDPR Art. 6(1)(b)).
  • To keep the website secure and stop spam: legitimate interest (GDPR Art. 6(1)(f)).
  • To meet legal duties, for example keeping invoices: legal obligation (GDPR Art. 6(1)(c)).

Never send passwords or verification codes. Your case details can include sensitive information, such as harassment or blackmail. I use it only to handle your case.

4. Who receives your data

  • Hostinger, which hosts this website and processes server data on my behalf.
  • Google (Gmail), where contact form messages are delivered.
  • Meta (WhatsApp), if you contact me through WhatsApp.
  • Social media platforms, only when needed to file a recovery request or a report for your case, and only with your agreement.
  • Police or other authorities, only if the law requires it or if you ask me to prepare an evidence report for them.

I never sell your data or share it for marketing.

5. Transfers outside Kosovo and the EU

Google and Meta may process data in other countries, including the United States. They use recognised safeguards such as the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

6. How long I keep your data

  • Messages and case files: for as long as needed to handle your case, and up to 12 months after it is closed, unless you ask for earlier deletion or the law requires longer storage (for example invoices).
  • Spam protection data: up to 10 minutes.
  • Server logs: as set by the hosting provider, usually a few weeks.

7. Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to its use, receive it in a portable format, and withdraw any consent at any time. To use these rights, contact me through the contact form or WhatsApp. You can also complain to the Information and Privacy Agency of Kosovo (AIP) or to the data protection authority in your EU country.

8. Security

The website only runs over an encrypted connection (HTTPS), uses strict security headers, collects as little data as possible, and only I have access to case information.

9. Children

My services are meant for adults. If you are under 16, please ask a parent or guardian to contact me. If you are a minor and someone is threatening or blackmailing you, tell a trusted adult and contact the police right away.

10. Changes

I may update this policy. The date at the top shows the latest version.