Last updated: TODO(legal)
TODO(legal): identify the controller — legal entity name, registered address, jurisdiction of establishment, and a contact address for data-protection enquiries.
When you follow a tracking link, we record a one-way salted hash of your IP address, your browser’s user-agent string, the referring page, an approximate country derived from your connection, and the destination you were routed to. We do not store your IP address in a form we can reverse.
Where our measurement pixel is installed on a partner’s landing page, and only where you have agreed to it, we set a first-party identifier that lets us recognise a returning visit for up to one year.
TODO(legal): confirm this list is exhaustive and add any processor-side collection.
Click records are used to attribute referrals to the correct partner and to detect fraudulent or automated traffic. We rely on our legitimate interest in operating and protecting the service, balanced against your interests by pseudonymising identifiers before storage.
The measurement pixel’s identifier is set only with your consent, which you may withdraw at any time.
Account sessions use a strictly necessary cookie without which you could not remain signed in.
TODO(legal): confirm the legitimate-interest assessment and record it.
TODO(legal): state the retention period for click records and pixel events. This is an open decision — see the launch-readiness spec.
We use third parties to host and operate this service, including a database provider and an application hosting provider.
TODO(legal): name each processor, its role, and the transfer mechanism for any processing outside the EEA.
TODO(legal): access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to lodge a complaint with a supervisory authority — naming the competent authority.
TODO(legal): contact address for privacy requests, and a DPO or EU representative if one is required.