Language
Legal

Privacy and Cookie Policy

This notice covers our marketing site censecloud.com only. Customer data processed inside the product is governed by the separate Data Processing Agreement (DPA) referenced in the customer contract.

Last updated: 5 June 2026

1. Data controller

The controller for this website is CenseCloud. For privacy questions under KVKK / GDPR: privacy@censecloud.com. For security disclosure: security@censecloud.com.

2. What we collect on this site

Applies to the marketing site only. For data collected by the product, see the architecture document on /trust.

  • Traffic analytics (Google Analytics 4 — Consent Mode v2): Page views, session duration, referrer, device type (mobile/desktop), broad country/city (derived from IP, IP itself not stored). If you do not grant consent, only anonymous aggregate counters remain — no cookies, no personal data.
  • Contact form: Only what you submit — name, work email, company name, message. Lawful basis: GDPR Art. 6(1)(b) / KVKK Art. 5/2(c) — pre-contractual response is a legitimate interest.
  • Cookies: GA4 cookies (only after consent), localStorage to remember your consent choice (not personal data).

We DO NOT use marketing automation tracking, A/B test tracking, user fingerprinting, or advertising pixels.

We do not read page content, clipboard, or session-replay your visits.

3. Who we share data with

Only the technical infrastructure providers below — each with a strictly scoped function:

  • Vercel Inc. (US): Static hosting and global CDN for this website. Cross-border transfer: under KVKK Art. 9 with your explicit consent, and under GDPR via SCCs.
  • Google LLC (Google Analytics 4): Only if you grant consent. Aggregated, IP-anonymized. Post-Schrems II via Standard Contractual Clauses.
  • Google Workspace SMTP (Gmail): To deliver contact-form messages to hello@censecloud.com.

Outside of these three, we share data with no third parties — no ad networks, no data brokers, no AI training platforms.

4. Retention

  • GA4 data: Google default — 14 months; we do not request extended retention.
  • Contact form messages: Deleted 12 months after the request is closed. If you become a customer, retained for the contract term.
  • Cookie preference (localStorage): Stays in your browser until you clear it. It never reaches our server.

5. Your rights under KVKK Art. 11 / GDPR Chapter III

As a data subject, you have the right to:

  • Know whether your data is processed
  • Request information about that processing
  • Request that your data be kept accurate and up to date
  • Request correction of incomplete or wrong data
  • Request deletion or destruction of data within the framework of KVKK / GDPR
  • Request the identity of third parties to whom your data has been transferred
  • Object to the result of automated decision-making
  • Claim damages if you are harmed by unlawful processing

To exercise these rights, write to privacy@censecloud.com. We respond within 30 days.

6. Change your cookie preference

Click "Cookie preferences" in the footer to reopen the consent banner and change your choice. You can also clear CenseCloud cookies from your browser settings.

7. Changes

When this notice changes, the "Last updated" date at the top is refreshed. For material changes, active customers also receive an email.