Privacy Policy

This Privacy Policy applies to three different situations:

• Visitors of our Website.
• Customers who create an account and use our Services.
• Visitors of websites that use our analytics script.

Key principles include:

• The analytics script does not use cookies.
• Raw IP addresses are never stored.
• A temporary pseudonymous identifier is generated and rotated daily.
• Cross-site tracking is not performed.
• Visitor identifiers cannot be linked across different websites.
• Personal data fields may be filtered or discarded automatically if detected in URLs or custom parameters.

This may include:

• IP address (processed transiently by infrastructure providers but not stored by us),
• browser type,
• operating system,
• request timestamps,
• error logs.

During registration we may collect:

• email address,
• authentication provider identifier (if you sign in through Google).

We store:

• your email address,
• account metadata,
• authentication events.

When you choose this option, the authentication provider may share certain information with us, including:

• your email address,
• a unique authentication identifier.

We use two authentication tokens:

• Access token: is stored in a cookie, valid for approximately 15 minutes.
• Refresh token: is stored in a cookie, valid for approximately 7 days.

We do not store full payment card details. Stripe may provide us with limited information necessary to manage subscriptions, including:

• billing email address,
• payment status,
• subscription status,
• transaction identifiers.

If a subscription expires or is cancelled:

• the account may be retained for 30 days; and
• after this period, associated analytics data may be permanently deleted.

This data may include:

• page URL (with personal data fields filtered),
• referrer URL,
• browser type,
• operating system,
• device type,
• screen size,
• language preference,
• country (derived from IP, which is not stored),
• page view timestamps,
• session duration,
• custom events (if configured by the Customer).

We use Cloudflare as a content delivery network and proxy. Cloudflare may process network traffic information including:

• IP addresses,
• request headers,
• routing data.

We maintain security logs, including:

• server access logs,
• error logs,
• abuse monitoring logs.

Performance of a Contract

Legitimate Interests

We may also rely on legitimate interests to disclose information in connection with a corporate transaction, such as a restructuring, merger, acquisition, financing, or sale of assets.

Legal Obligations

We may disclose information described in this Privacy Policy to:

• Third-party service providers and partners that assist us in operating the Services and Websites, including those described in this Policy.
• Regulators, courts, law enforcement agencies, government authorities, fraud prevention agencies, or other third parties where we believe disclosure is necessary to comply with applicable law or legal process, enforce our legal rights, protect our users or the public.
• Actual or potential buyers and their advisers in connection with a merger, acquisition, restructuring, financing, or sale of all or part of our business.

Such safeguards may include:

• entering into Standard Contractual Clauses approved by the European Commission with the recipient of the data, or
• relying on other legally recognized transfer mechanisms available under applicable data protection laws.

Depending on applicable data protection laws and subject to certain limitations, you may have the following rights with respect to personal data that we process as a data controller:

• You have the right to request access to your personal data and to obtain a copy of it.
• You have the right to request correction of inaccurate or incomplete personal data.
• You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
• You may request restriction of processing in certain situations, for example while we verify an objection you have raised.
• Where applicable, you may request that your personal data be provided in a structured, commonly used, and machine-readable format and transmitted to another controller.
• You may object to the processing of your personal data in certain circumstances, including where personal data is used for direct marketing purposes.
• If you believe that your personal data is being processed in violation of applicable data protection laws, you have the right to lodge a complaint with your local data protection authority.

Exercising Your Rights

You may exercise your rights by contacting us at [email protected].

We may request information necessary to verify your identity before responding to your request.

Please note that we can assist you with exercising your rights only where we act as the data controller of your personal data (for example, when we process your email address for account management or marketing communications).

If you interact with a website that uses our analytics Services, the website owner acts as the data controller for analytics data collected through that website. Any requests relating to such analytics data should be directed to the relevant website owner.

Where applicable, we will assist our Customers in responding to requests relating to analytics data in accordance with applicable data protection laws.

If you have any questions about this Privacy Policy, please contact us:

• Email: [email protected]
• Address: Key Arg B.V., Hoge Bothofstraat 49, 7511 ZA Enschede, Overijssel, the Netherlands