Privacy policy

We build consent software, so we try to practise what we preach: collect as little as possible, keep it in the EU where we can, and explain it plainly. This policy covers two things — our own website and app, and the data our banner processes on our customers' websites.

1. Our website

This website uses no analytics, advertising or tracking cookies. That's why you don't see a cookie banner here. We use strictly necessary browser storage only: to keep you signed in, to remember an unsaved banner draft on your device, and to remember your checklist progress. Our hosting provider sets a technical cookie it needs to deliver the site (__dpl), and its security layer can set __cf_bm to filter out bots.

Our pages don't contact other companies' servers while you browse: fonts and all other files come from this site. Stripe's checkout script, which sets Stripe's own fraud-prevention cookies, only loads when you open checkout to buy a plan.

2. Your account

When you create an account we process:

• Your email address and a securely hashed password (or your Google account ID if you sign in with Google).
• The sites you add, their banner designs, scans you run and license details.
• Billing details you enter at checkout: name, email, country, and optionally company and VAT ID.

We use this to provide the service, issue licenses and invoices, and meet tax obligations. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligation (Art. 6(1)(c)). You can delete sites at any time; to delete your account entirely, contact us and we'll remove it within 30 days, except records we must keep for tax purposes.

3. Data the banner processes on your website

For each site using PrivacyPill we act as your processor (Art. 28 GDPR). The banner:

• Stores one first-party cookie, pp_consent, on your visitor's device with a random consent ID, their choice, the banner version and a timestamp.
• Sends a pageview count to us so we can measure plan usage. It contains your site key and nothing about the visitor.
• Sends a consent record when a visitor chooses: consent ID, choice per category, banner version and country (derived from the request, not stored as an IP address).

We don't store IP addresses, user agents or any cross-site identifiers. Consent records are kept for 30 days on the free plan and 12 months on paid plans, so you can demonstrate consent under Art. 7(1) GDPR.

4. Scanner

When you scan a URL, our servers fetch that public page and its Google Tag Manager containers. If you're signed in, the result is saved to your account; otherwise it isn't stored. To prevent abuse we count scans per visitor using a one-way hash of the IP address, which we delete after two hours.

5. Referral links

Banners on the free plan include a small “Consent by PrivacyPill” link. When someone clicks it we count one click for that site and month so we can credit the site owner if the visitor later signs up and buys a plan. We don't set cookies or store IP addresses for this.

6. Payments and sub-processors

We use a cloud database and hosting provider to run the service. Purchases are processed by Stripe and sold through Link, Stripe's checkout service, which acts as the reseller: it takes the payment, calculates and remits VAT, sends receipts and handles refunds and disputes. Stripe receives your billing details and payment method; we never see your card number. We keep your billing name, email, country, VAT ID and license details to run your account. We only share what each provider needs to do its job.

7. Your rights

You have the right to access, correct, delete and export your data, to object to processing and to complain to your data protection authority. Write to us and we'll answer within one month.