Privacy Policy

The data controller for this website and the Let's Consent service is the operator named in our Imprint. For any privacy question or request, contact us at hi@letsconsent.eu.

If you have an account (you run websites with Let's Consent):

• Your email address — used for passwordless sign-in and essential service notices. We never set a password, so there is none to store.
• Your organization memberships and the domains you configure.

If you visit a website that uses Let's Consent:

• A consent record: which consent choices you made, when, and for which website. This is what allows the site operator to prove compliance.
• No advertising identifiers, no cross-site tracking, no profiles. The consent banner does not follow you around the web.

Technical logs: our servers briefly keep standard access logs (IP address, timestamp, requested URL) for security and abuse prevention. They are deleted automatically after a short period.

• To provide the service (Art. 6(1)(b) GDPR) — signing you in, delivering consent banners, storing consent records.
• To keep the service secure (Art. 6(1)(f) GDPR) — short-lived server logs, abuse prevention.
• To comply with legal obligations (Art. 6(1)(c) GDPR) — retaining consent records for the legally relevant proof period.

We do not use your data for advertising, we do not sell it, and we do not enrich it with third-party sources.

All data is processed on Hetzner servers in Germany, with encrypted backups in Helsinki, Finland — entirely within the EU. Our complete subprocessor list (it has two rows) is on the Compliance page.

Account data lives as long as your account does. Consent records are kept for the legally relevant proof period, logs only briefly. Details are on the Compliance page under Data Retention.

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15),
• have inaccurate data corrected (Art. 16),
• have your data erased (Art. 17),
• restrict or object to processing (Art. 18, 21),
• receive your data in a portable format (Art. 20),
• lodge a complaint with a supervisory authority (Art. 77).

To exercise any of these rights, contact us via the details in the Imprint. We respond without undue delay.