Privacy Policy

Last updated: October 20, 2025

1. Introduction

CookieConfig ("we", "our", or "us") provides cookie consent management and privacy compliance tools. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (encrypted)
  • Company name (optional)
  • Billing information (processed securely through Stripe)

2.2 Website Data

When you add websites to your account, we collect:

  • Website domain and URLs
  • Cookie and script information detected on your website
  • Consent preferences from your website visitors
  • Analytics data (page views, consent events)

2.3 End-User Data

When visitors interact with consent banners on websites using CookieConfig:

  • Anonymized visitor IDs
  • Consent preferences (categories accepted/rejected)
  • Timestamp and geographic location (country/region)
  • Page URLs where consent was given
  • Scripts and cookies blocked or allowed

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our cookie consent management service
  • Process your subscription and billing
  • Generate compliance audit reports
  • Provide analytics about consent trends and website visitors
  • Detect and block scripts/cookies based on user consent
  • Improve our service and develop new features
  • Communicate with you about your account and service updates
  • Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Stripe for payment processing, Supabase for data storage
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Retention

We retain your data as follows:

  • Account Data: Until you delete your account
  • Consent Records: For compliance purposes, we retain consent logs for up to 7 years or as required by applicable law
  • Analytics Data: Aggregated analytics are retained indefinitely
  • Audit Logs: Retained for compliance and legal requirements

6. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request access to your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data
  • Portability: Request a copy of your data in a portable format
  • Objection: Object to certain processing of your data
  • Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at the email address provided below.

7. Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest for sensitive data
  • Row-level security policies in our database
  • Regular security audits and monitoring
  • Secure authentication with industry-standard protocols

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

9. Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the service after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: