RabbitproofCompliance
Last updated 21 October 2026
What Rabbitproof does with information about the visitors to your website, who helps us, how long we keep it, and the documents you may need.
Rabbitproof is not available in the European Union, Norway, Iceland, Liechtenstein, the United Kingdom or Switzerland.
Data Processing Agreement
For customers who want our commitments about information on their visitors in writing. You decide what your website collects, so you decide how information about your visitors is used and Rabbitproof acts for you. One part is ours: when a device is identified as a bot, we use what we learned to protect every website that uses Rabbitproof, and for that we decide.
Who handles data for us
| Company | What they do for us | Where |
|---|---|---|
| Cloudflare | Runs Rabbitproof and sends our emails. Handles visitors to your website and your account. | Worldwide |
| BinaryLane | Hosts our network check server. Sees the internet address a visitor's device connects from. | Sydney, Australia |
| Stripe | Takes payments. Your card details go straight to Stripe. | Worldwide |
| Microsoft | Hosts our support mailbox. | Worldwide |
| Serves the fonts on rabbitproof.com.au. | Worldwide |
Only Cloudflare and BinaryLane handle information about the visitors to your website. We tell customers by email 30 days before we add a company to this list.
How we protect it and how long we keep it
- We keep a visitor's internet address only in a coded form, never the address itself, except in our network check server's log for 7 days.
- We never collect what a visitor types into your forms, and we never use any of this for advertising.
- Each website's records are kept apart. No customer is shown another customer's visitors.
| Record | Kept for |
|---|---|
| Your website's list of requests | 7 days |
| Visitors blocked | 24 hours |
| Visitors you unblocked | 7 days |
| Daily counts behind your dashboard's numbers | 32 days |
| Forms sent to your website | 30 days |
| Request counts for billing | 100 days |
| Our record of each decision | About 3 months |
| Devices identified as bots | 90 days after they were last seen |
| Our network check server's log | 7 days |
When you delete a website or your account, the records about its visitors are deleted at once.
Ask to see or delete data
- Customers: write to support@rabbitproof.com.au to see, correct or delete what we hold about you. Deleting your account in the dashboard deletes it straight away.
- Visitors: ask the website you visited first, as it decides how its information is used. You can also write to support@rabbitproof.com.au with the website's address and the internet address you used. We keep addresses only in a coded form, so we can find your records only from those.
We answer within one month.
For your privacy policy
Copy this into your own privacy policy, where you list the services your website uses.
This website uses Rabbitproof (rabbitproof.com.au) to protect it from bots and spam. When you visit, Rabbitproof checks your browser and device and the internet address you connect from, to tell people and bots apart. It sets a cookie so you are not checked again on every page. This information is used only to protect this website and other websites that use Rabbitproof, and is kept for a short time. Rabbitproof's privacy policy: rabbitproof.com.au/privacy.