1. Controller
The data controller for takedown.su is 78 OVER 37 LIMITED. Privacy contact: support@overload.su.
2. Data we collect
2.1 Visiting this website
The site is delivered through bunny.net's content delivery network. The CDN logs request metadata — IP address, requested URL, response code, user agent, referrer and timestamp — for security, abuse prevention and aggregate-traffic analysis. We treat this metadata as a transient operational log and do not combine it with personally identifying information unless we are investigating abuse of the website itself.
2.2 Engaging our services
When you contact us by email or Telegram or sign a statement of work, we receive: business contact details, the abusive URLs and supporting evidence you share with us, internal correspondence about the case, and any artefacts produced during investigation (screenshots, source HTML, redirection chains, WHOIS, DNS, certificate transparency, payment-flow recordings).
3. Lawful basis
Where the GDPR or analogous regimes apply, we process personal data on the basis of: (a) contract — to perform the takedown engagement; (b) legitimate interests — operating, defending and improving the service; (c) legal obligation — when required by law.
4. Evidence handling
Evidence is hashed and time-anchored at collection, stored in immutable archives, and made accessible only to assigned investigators. We share evidence with abuse contacts at hosts, registrars, registries, browser safe-browsing partners, ad networks and (where relevant) payment processors, in the minimum quantity required to obtain action. We may share with law enforcement on lawful request.
5. Sharing with third parties
We share information with: infrastructure providers required to operate the service (CDN, email, Telegram); abuse contacts at hosts and registrars; professional advisers under written confidentiality; law enforcement and regulators on lawful request. We do not sell personal data, and we do not transfer evidence to data brokers.
6. International transfers
Abuse handling is inherently cross-border. Transfers from the EEA or UK rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, where applicable.
7. Retention
Engagement correspondence and case files are retained for the duration of the engagement plus a reasonable period after closeout for recurrence monitoring and audit (typically up to 36 months for retainer engagements). CDN logs are retained for the period configured at our infrastructure provider, typically not exceeding 30 days for unaggregated records.
8. Your rights
Subject to local law: access, correction, deletion, portability, objection, restriction. To exercise any right, contact support@overload.su. Where evidence is held in connection with an active case, deletion may be limited by our legal-interest basis.
9. Security
Role-based access control, hardware-backed multi-factor authentication for staff, encrypted-at-rest evidence archives, segregated environments per engagement. Breach notification per applicable law.
10. Children
Takedown.su is a B2B service. We do not knowingly collect personal data from children under 16 except as part of evidence relating to an engagement (for example, content involving a child shown in a phishing or scam page being investigated).
11. Changes
Material changes will be posted here with a new "last updated" date.
12. Contact
78 OVER 37 LIMITED — privacy contact: support@overload.su. Telegram: @OverSupBot.