Privacy Policy

This Privacy Policy explains how the Themida website (themida.dev) handles your data. Themida is an open-source, personal project — not a company. This policy covers the website only. The Themida scanner software you self-host runs entirely on your own machine under your own LLM keys and does not send any data to us.

Who is responsible

The data controller for this website is Nikolaos Petridis. For any privacy question or request, contact nikolaospetridhs@gmail.com.

What we collect

We collect anonymous usage analytics only, and only after you consent. We do not ask for, store, or process names, email addresses, or account data — there are no accounts on this site.

If you accept analytics cookies, Google Analytics 4 collects:

• Pages you visit and how long you stay
• Approximate location (country/region level), derived from your IP — your full IP address is not stored by us
• Device, browser, and referral source (e.g. which site sent you here)

Cookies & consent

When you first visit, analytics are disabled by default. We use Google Consent Mode v2: no analytics cookies are set and no data is sent until you click Accept on the cookie banner.

If you click Decline, no analytics cookies are set. You can change your choice at any time using the Cookie settings link in the footer.

Legal basis (GDPR)

Our legal basis for processing analytics data is your consent (Art. 6(1)(a) GDPR), which you give via the cookie banner and can withdraw at any time.

Who we share data with

• Google (Google Analytics & Tag Manager) — processes analytics data on our behalf if you consent. See Google's Privacy Policy.
• Vercel — hosts the website and may process technical server logs (e.g. IP, request time) as part of delivering the page. See Vercel's Privacy Policy.

We do not sell your data and we do not use it for advertising.

Data retention

Analytics data in Google Analytics is retained according to the property's configured retention period (by default up to 14 months), after which it is deleted.

Your rights

Under the GDPR you have the right to:

• Withdraw consent at any time (via Cookie settings)
• Request access to, correction of, or deletion of your data
• Object to or restrict processing
• Lodge a complaint with your local data protection authority

To exercise any of these, email nikolaospetridhs@gmail.com.

Changes to this policy

We may update this policy as the site evolves. The "Last updated" date above always reflects the current version.