Your network-monitoring data stays on your device — we never collect it. The only data we hold is what's needed to run your account, activate your licence and keep the service secure, and you can ask to see or delete it at any time.
1. Who we are
TechProf Ltd (operating as NetInsightPro), registered in England & Wales. Address: Suite 27 Chessington Business Centre, Cox Lane, Chessington, Surrey KT9 1SD, United Kingdom. Contact: privacy@netinsightpro.com.
This policy explains what personal data we process when you use netinsightpro.com and the NetInsightPro client applications.
2. Data handled by the client app
All network-monitoring data stays on your device. We do not collect, transmit, or store packet contents, destination IPs, app names, or traffic volumes outside your device. The only data the app ever sends to our servers is:
- Your license key and device fingerprint (HWID hash) for activation
- Anonymous crash telemetry (opt-in, disabled by default)
- App version + OS for update checks
Cookie & Tracker Privacy (desktop app)
The desktop app includes an optional Cookie & Tracker Privacy feature (Pro tier; Windows and Linux desktop). When you turn it on, the app builds an inventory of the cookies the web browsers on your device have already stored, so you can see which trackers are present and classify them. All of this processing happens on your device. No cookie data is ever sent to our servers.
- Metadata only. The feature reads only cookie metadata from each browser's own local cookie store: the cookie's name, site/domain, path, creation and expiry dates, approximate size, and flags (for example Secure, HttpOnly, and SameSite).
- Never the cookie value. It never reads, decrypts, or transmits the contents (value) of any cookie — not even for browsers that keep that value unencrypted on disk. This is enforced by construction: the query only ever measures the length of a cookie's value, it never selects the value itself.
- On-device only. Cookie names, domains, counts, and the resulting inventory never leave your device. No cookie data — no cookie names, domains, or counts — is ever sent to our servers or included in any telemetry.
- Tracker labels are attributed, not measured. Purpose and category labels come from public reference lists bundled with the app — not from any observation of what a cookie sent. We use the Open Cookie Database (Apache-2.0) for a cookie's purpose and category, and EasyPrivacy (GPLv3 and CC-BY-SA 3.0) to match known tracker domains.
- One-click block (Windows). You can block a tracker's host in a single click. This is a local firewall action on your own machine (available on Windows in this release). It blocks the host, not an individual cookie, and sends nothing off your device.
This feature does not delete cookies and does not inspect what data a cookie sends. Cookie inventory is a desktop-only feature (Windows and Linux) and is not available on macOS, iOS, or Android.
3. Data handled by the website & account
- Account: email address, hashed password, activation history
- Billing: processed by Stripe — we store only transaction IDs, never card numbers
- Cookies: strictly-necessary cookies for login sessions (see Cookie Policy)
- Server logs: IP address, user-agent, request path (retained 30 days for security audit)
4. Legal basis (UK GDPR / EU GDPR)
- Contract — processing your purchase + activation (Art. 6(1)(b))
- Legitimate interest — security logging + abuse prevention (Art. 6(1)(f))
- Consent — opt-in telemetry + marketing emails (Art. 6(1)(a))
5. Data retention
- Account data: until account deletion + 30 days
- License records: 7 years (tax requirement)
- Server logs: 30 days
- Backup snapshots: 35 days rolling
6. Your rights
Under UK GDPR you can request access, rectification, erasure, restriction, portability, or object to processing. Email privacy@netinsightpro.com. We respond within 30 days. Complaints can be filed with the UK ICO.
California (CCPA/CPRA) and other jurisdictions: contact us at the same address — we honour equivalent rights globally.
7. International transfers
Our infrastructure runs in a single US region. Transfers from the UK/EU use the UK-IDTA + Standard Contractual Clauses. Stripe data is transferred to the US under its DPF certification.
8. Sub-processors
We engage the following sub-processors to deliver the Service. Enterprise customers can request a signed copy of this list for procurement.
- Amazon Web Services, Inc. — cloud hosting, storage, content delivery, DNS, transactional email (single US region)
- Stripe Payments UK Ltd / Stripe Inc. — subscription billing + invoicing (UK / US under DPF)
- GitHub, Inc. — source control and continuous delivery (US)
- Google Fonts — web-font delivery on marketing pages (no personal data stored)
- Anthropic — AI chat assistance (US / EU)
30 days' notice is given for any new sub-processor — subscribe by emailing privacy@netinsightpro.com.
9. Security
All data encrypted in transit (TLS 1.2+) and at rest (customer-managed encryption keys). MFA enforced for administrative access. See our Security page for details.
10. Children
Not intended for users under 16. We do not knowingly collect data from children.
11. Changes
Material changes: 30-day email notice to active customers. Minor edits: this page updated with a new "Last updated" date.