Privacy Policy

Last updated: 1/29/2026

1. Introduction

CookiePot ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cookie consent management service.

By using CookiePot, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Name
  • Company information (if provided)
  • Billing information for paid plans

2.2 Consent Data

We process consent data on behalf of our customers, including:

  • Visitor IDs (anonymous identifiers)
  • Consent choices (categories accepted/rejected)
  • Timestamps of consent actions
  • IP addresses (for fraud prevention)
  • Browser and device information

2.3 Usage Information

We automatically collect information about how you use our service:

  • API requests and responses
  • Dashboard usage analytics
  • Error logs and debugging information
  • Performance metrics

3. How We Use Your Information

We use the collected information for:

  • Service Provision: To provide, maintain, and improve our cookie consent management service
  • Account Management: To manage your account and provide customer support
  • Billing: To process payments and manage subscriptions
  • Analytics: To understand how our service is used and improve user experience
  • Security: To detect, prevent, and address fraud and security issues
  • Legal Compliance: To comply with legal obligations and enforce our terms
  • Communications: To send service updates, security alerts, and support messages

4. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

  • Account Data: Retained while your account is active and for 90 days after deletion
  • Consent Records: Retained according to your plan (30 days to unlimited)
  • Billing Records: Retained for 7 years for tax and accounting purposes
  • Logs: Retained for 90 days for security and debugging purposes

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third-party companies that help us provide our service (hosting, payment processing, analytics)
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

6. Your Rights

Under GDPR and other privacy laws, you have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your personal data
  • Portability: Request transfer of your data to another service
  • Objection: Object to processing of your personal data
  • Restriction: Request restriction of processing
  • Withdrawal: Withdraw consent at any time

To exercise these rights, contact us at info@cookiepot.eu.

7. Security

We implement appropriate technical and organizational measures to protect your data:

  • Data encryption in transit (TLS 1.3) and at rest (AES-256)
  • Regular security audits and penetration testing
  • Access controls and authentication
  • Automated backup and disaster recovery
  • Employee training on data protection

8. International Data Transfers

Our services are hosted in the European Union (EU). If you access our service from outside the EU, your data will be transferred to and processed in the EU under GDPR protection.

9. Children's Privacy

CookiePot is not intended for use by children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • Email: legal@cookiepot.eu
  • Address: BrightClouds CommV, Boompieperstraat 41, 8000 Brugge, Belgium
  • Company Registration number: BE1009288463

12. Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer:

  • Email: dpo@cookiepot.eu
  • Address: BrightClouds CommV, Boompieperstraat 41, 8000 Brugge, Belgium
  • Company Registration number: BE1009288463