Privacy Policy

3.1 Usage & analytics data (after consent)

• Page views, pages visited, session duration, approximate region/city, device, browser, operating system.
• Technical identifiers (e.g., pseudonymous client IDs). IP addresses are trimmed/anonymized before analytics processing.

3.2 Necessary technical data

• Essential cookies or equivalent storage for security, load balancing, and consent state.
• Basic server logs (e.g., IP, user agent, timestamps) for security and reliability.

3.3 Voluntarily provided data

• Content you submit via contact forms, feedback, or email (e.g., name, email, message).

4.1 Purposes

• Analytics & performance: Understand traffic, improve content and UX, detect issues.
• Security & reliability: Prevent abuse, debug outages, ensure availability.
• Communications: Respond to messages you send us.

4.2 Legal bases (GDPR/UK-GDPR)

• Consent (Art. 6(1)(a)): Analytics cookies/processing occur only after you grant consent via our consent banner/modal.
• Legitimate interests (Art. 6(1)(f)): Essential operations like security, fraud prevention, and basic site functionality.
• Contract (Art. 6(1)(b)): When we respond to inquiries you initiate.

We use a consent system powered by Cloudflare Zaraz. Tools that require consent (e.g., Google Analytics 4) are blocked by default and only load if you accept the relevant purpose (e.g., "Analytics"). We also use Google Consent Mode v2 to respect your choices.

5.1 How to manage your choices

• Use the cookie banner/modal shown on first visit. You can accept, reject, or manage granular choices.
• You can revisit your choices at any time via the "Cookie settings" link in our footer (if available) or by clearing your cookies.
• Browser controls: you may block or delete cookies in your browser settings.
• Google Analytics opt-out add-on: https://tools.google.com/dlpage/gaoptout

5.2 Types of cookies/storage

• Strictly necessary: security, load balancing, consent state (always active).
• Analytics (consent-based): GA4 via Cloudflare Zaraz to understand site usage.

We do not sell your personal information for monetary consideration. However, when you consent to advertising cookies, we share data with advertising partners for cross-context behavioral advertising. We also share limited data with service providers ("processors") that help us run the Site:

6.1 Service Providers

• Cloudflare, Inc. – infrastructure, security, and tag management (Zaraz). Privacy: cloudflare.com/privacypolicy
• Google Ireland Limited – Google Analytics 4 (processor for analytics). Privacy: policies.google.com/privacy

6.2 Advertising Partners (consent-based)

When you accept advertising cookies, we share identifiers and browsing activity with:

• Supply-Side Platforms (SSPs) – programmatic ad exchanges that connect us with advertisers
• Google Ad Manager (GAM) – ad serving and management platform
• Demand-Side Platforms (DSPs) – platforms used by advertisers to bid on ad inventory

This sharing enables personalized advertising and constitutes "sharing" for cross-context behavioral advertising under California law (CPRA). You can opt out at any time by rejecting advertising cookies via the "Cookie Settings" button in the footer.

We require processors to protect data and use it only per our instructions. We may disclose information if required by law or to protect our rights and users.

NitroPay Services

This website uses the services of NitroPay to manage programmatic advertising. NitroPay employs various technologies on this website, including tools to serve content, display advertisements, and enable advertising to visitors, which may utilize first and third-party cookies.

A cookie is a small text file sent to your device by a web server that enables the website to remember information about your browsing activity. First-party cookies are created by the site you are visiting, while third-party cookies are set by domains other than the one you're visiting. NitroPay and our partners may place third-party cookies, tags, beacons, pixels, and similar technologies to monitor interactions with advertisements and optimize ad targeting.

Data Collection

The following information may be collected, used, and stored when serving personalized ads:

• IP address
• Operating system type and version
• Device type
• Language preferences
• Web browser type
• Email (in a hashed, de-identified form)

Hashed Email for Identity Matching

When you are logged in and have consented to personalized advertising via our consent banner, we may share a de-identified (SHA-256 hashed) version of your email address with NitroPay and their identity partners (such as LiveRamp and UID2.0).

This anonymous hash cannot be used to directly identify you and is not stored by us. It is passed through to advertising partners in real-time to enable more relevant advertisements and better ad performance. This process helps advertisers recognize users across devices and sessions without accessing your actual email address.

You can revoke your consent at any time by clicking the button in the footer and rejecting advertising/marketing cookies. When you log out, the hashed email is automatically cleared.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services.

Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising.

Note: Microsoft Clarity only loads after you consent to analytics cookies via our consent management platform.

For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Your data may be processed outside your country. When data is transferred from the EEA/UK to countries without an adequacy decision, we rely on appropriate safeguards, such as the EU Standard Contractual Clauses (SCCs) and equivalent UK mechanisms, implemented by our processors (e.g., Google, Cloudflare).

• Analytics (GA4): retained per GA4 settings (typically 14 months). We configure GA with IP anonymization and do not enable advertising features unless you consent.
• Server logs: retained for a short period (e.g., up to 90 days) for security and troubleshooting.
• Contact/communication data: kept only as long as needed to respond and for record-keeping, unless you ask us to delete it.

11.1 GDPR/UK-GDPR (EU/UK users)

You may request: access, rectification, erasure, restriction, portability, and to object to certain processing. Where processing is based on consent, you may withdraw it at any time via the cookie banner or by contacting us.

You also have the right to lodge a complaint with your local supervisory authority.

11.2 LGPD (Brazil)

Brazilian users may request confirmation of processing, access, correction, anonymization, portability, deletion, and information about sharing. You may also revoke consent at any time.

11.3 CCPA/CPRA (California)

California residents have rights to know, delete, correct, and limit use of sensitive personal information. We do not "sell" personal information for monetary consideration.

However, when you consent to advertising cookies, we do "share" personal information (such as identifiers and browsing activity) with advertising partners for cross-context behavioral advertising as defined by the CPRA. This sharing only occurs when you accept advertising cookies.

To opt out: Click the "Cookie Settings" button in the footer and reject advertising cookies, or visit our Do Not Sell or Share My Personal Information page.

We use reasonable technical and organizational measures to protect data (e.g., HTTPS/TLS, access controls). No method of transmission or storage is completely secure.

The Site is not directed to children under the age of 16 (or the age required by local law). We do not knowingly collect personal data from minors. If you believe a minor provided personal data, please contact us and we will delete it.

We may update this Policy from time to time. We will post the revised version with an updated effective date and, if changes are significant, we will provide a more prominent notice.

To exercise your rights or ask questions, contact us at [email protected]. We will respond within the timelines required by applicable law.