LEGAL CONTACTS · DSA · GDPR

Legal Contacts & Abuse Reporting

This page provides DeltaFox's official contact points for abuse reports, law enforcement requests, GDPR data subject requests, and legal communications. In compliance with the Digital Services Act (EU Reg. 2022/2065) and GDPR (EU Reg. 2016/679).

SERVICE PROVIDER IDENTITY

Data Controller & Service Provider DSA Art. 11

DeltaFox is an open source project developed and maintained by an independent developer, on a non-commercial, non-profit basis. The service is not a commercial activity and does not generate revenue. The data controller is the natural person identified below.

Project name
DeltaFox
Nature
Open source project · Independent developer
Jurisdiction
Italy (EU)
Servers
European Economic Area (Hetzner, Helsinki — Finland)
Repository
https://deltafoxxx.eu

For requests requiring legally binding communications, a certified email (PEC) is being activated. Until then, the email addresses below are the official channels.

FOR USERS

Abuse & Illegal Content Reporting DSA Art. 16

If you are a victim or witness of abuse committed via DeltaFox (harassment, stalking, threats, fraud, illegal content, distribution of child sexual abuse material, etc.), report it immediately to the address below. We review every report and take appropriate measures, including account suspension and cooperation with relevant authorities.

To speed up review, include in your report: (a) description of the abuse, (b) username of the user involved, (c) approximate date/time, (d) any screenshots or evidence. Note that message content is end-to-end encrypted and not accessible to the service provider.

Response time
≤ 72h
CSAM & terrorism
≤ 24h
Languages
IT · EN

In case of immediate danger to yourself or others, contact law enforcement directly (112 in Italy / EU). Reports to this address do not replace a formal police complaint.

GDPR Requests (Data Subject Rights) GDPR Art. 15-22

Under EU Regulation 2016/679 you have the right to: access your data (Art. 15), rectify it (Art. 16), erase it (Art. 17 — "right to be forgotten"), restrict processing (Art. 18), portability (Art. 20), object to processing (Art. 21), and withdraw consent at any time.

To exercise your rights, write to the address below specifying: (a) account username, (b) right being exercised, (c) ID document (only required for requests affecting account integrity).

GDPR response time
≤ 30gg
Account erasure
≤ 30gg

You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority in your country of residence.

FOR AUTHORITIES

Law Enforcement & Judicial Requests DSA Art. 9-10

DeltaFox cooperates with valid legal requests from law enforcement, judicial authorities, and other competent authorities, in accordance with applicable EU and national law (Italian Legislative Decree 70/2003, GDPR, Budapest Convention on Cybercrime, MLAT).

Requests must originate from a verifiable institutional account and include:

Important: message content between users is end-to-end encrypted with keys that remain exclusively on user devices. DeltaFox does not hold these keys and cannot decrypt messages, even when ordered to. Limited metadata may be provided (username, registration date, registration IP if available, connection timestamps).

Standard requests
≤ 14gg
Emergency (life threat)
≤ 24h
Counter-terrorism (TCO)
≤ 1h

Legal references: EU Reg. 2021/784 (TCO), EU Dir. 2019/713, DSA Art. 18 (suspicion of criminal offence reporting), Italian CNCPO Polizia Postale (CSAM), Budapest Convention 2001.

Child Sexual Abuse Material (CSAM) — Priority Reporting

DeltaFox has zero tolerance for child sexual exploitation. Any suspected CSAM report receives top priority and is forwarded to the Italian National Center for the Fight Against Online Child Pornography (CNCPO — Polizia Postale) or the competent authority of the involved country.

TRANSPARENCY

Transparency Report DSA Art. 24

We publish a periodic transparency report with the number of authority requests received, abuse reports, suspended accounts and data disclosed. Publication is mandatory under the Digital Services Act.