Privacy notice
Who to contact
For questions about this notice, or to exercise your rights in relation to data CookieBrief holds, email hello@cookiebrief.com.
When you pay for a checkup, Lemon Squeezy acts as merchant of record (the reseller). Lemon Squeezy handles payment and sales tax or VAT, issues your receipt, and is an independent controller of the personal data you give them to check out. Their privacy notice applies to that processing. They share with CookieBrief the order details we need to fulfil the report, including the site URL and any other information you enter in the Lemon Squeezy checkout fields.
What we collect and why
Teaser requests and orders. If you email us a teaser request, or if you place a paid order, we process your name, email address, the public URL you want scanned, optional agency name and logo, optional notes, and your order details. The purpose is to reply with a teaser or to fulfil a paid report. The legal basis is pre-contractual steps or performance of a contract (GDPR Article 6(1)(b)) and, where we rely on a consent box, Article 6(1)(a). You can withdraw consent for teaser messages at any time; that does not affect a paid order already in progress.
White-label artwork. If you send a logo, we use it only to produce the report you ordered.
Scans of public websites. We load a public URL in a browser, in the same way a visitor would. We record cookies, requests, screenshots, and publicly visible text in order to write the report. We do not try to log in, and we do not ask for admin passwords. If a homepage happens to display personal data (for example a name in a testimonial), it may appear in a screenshot. We keep that only as part of the report file.
Server logs. This static site is hosted on Vercel, which may process IP addresses and standard request logs to operate the service and to keep it secure, typically under Article 6(1)(f). We do not run marketing analytics or advertising pixels on this site as it is currently built.
This site does not set marketing cookies. If that ever changes, this notice will be updated and, where required, a consent choice will be added first.
Teaser requests
Teaser requests are made by email to hello@cookiebrief.com. This site has no web form, so nothing you send passes through a form provider. Our email provider processes the message so we can read and answer it.
How long we keep data
- Teaser requests: until we have replied, and then up to 12 months in case you follow up, unless you ask us to delete sooner.
- Paid orders and the reports we produced: as long as needed to deliver, re-check, and keep necessary business records.
- Host logs: according to the host’s default, typically a short period.
Sharing
We share personal data with the host of this site (Vercel), our email provider, and Lemon Squeezy for paid orders (or Fiverr, if you bought a gig there). We do not sell personal data. We do not use teaser addresses for a newsletter unless you separately ask for one.
If a processor is outside the EEA, we will rely on a valid transfer mechanism (for example the EU Standard Contractual Clauses) and will name that processor here once it is chosen.
Your rights
You may request access, rectification, erasure, restriction, or objection, and data portability, as provided by the GDPR. You may also withdraw consent where consent is the basis we used. To do that, email hello@cookiebrief.com. You can complain to a competent data protection authority, including the Icelandic Data Protection Authority (Persónuvernd) or, if you live in another EEA state or the UK, your local supervisory authority.
Children
The service is aimed at agencies, freelancers, and businesses, not at children.
Changes
If we change this notice in a material way, we will update this page and the date above.