Privacy policy

This policy is being finalised. The structure below is complete; the bracketed parts are being filled in.

Who we are

ProjectMangoTech is the data controller for this website.

What we collect

• Contact form: your name, email, organisation (optional) and message. Used only to reply to your enquiry.
• Ideas board: the title and text of your suggestion, and a signed cookie that remembers your votes. No account is created.
• Payments: handled by Stripe. We receive your email address and payment status, never your card details.
• Live demos: sample data only. Demo environments reset regularly and must not be used for real personal data.
• This site sets no advertising or analytics cookies.

Visitor statistics

To see which pages are useful and what people look for, this site counts visits on its own server. No cookies are set, nothing is stored on your device, and no outside analytics service is used.

What we record: the page you viewed and how long it stayed on screen; the website that sent you, if your browser said (its name only), or the campaign named in the link; the type of device, browser and operating system; your approximate country; and clicks that matter for the site: downloads, opening a sandbox or application, searches in the help centre, and links to other sites.

What we do not record: your IP address or your browser's full identifying text. Visits are not linked to your account if you have one.

How the estimates work: your IP address is used for a moment, and then discarded, to look up your approximate country in a database held on our own server, and to make a daily visitor estimate: a code computed with a secret that is replaced every day and then deleted, so it cannot be traced back to you or linked from one day to the next.

Campaigns and sales: when you create an account or start a purchase, we note which website or campaign link brought you to the site that day, if any, so we can see which ones lead to sales. It uses the same daily visitor estimate, so it cannot connect visits on different days.

How long we keep it: detailed records for 13 months; after that only daily totals remain.

Opting out: if your browser sends Global Privacy Control or Do Not Track, your visits are not counted at all.

QR code scans

When someone opens a short link at go.projectmangotech.com, usually by scanning a QR code, we record that it happened, so the people who made the code can see how it is used.

What we record: the time; which code; what kind of request it was (for example a person's browser, or a messaging app fetching a link preview); the type of device, browser and operating system; the approximate country; and the website that sent the visitor, if their browser said (the site's name only, never the full address).

What we do not record: your IP address, your browser's full identifying text, or anything added to the end of the link. No cookies are set and nothing is stored on your device.

How the estimates work: your IP address is used for a moment, and then discarded, to do two things. It looks up your approximate country in a database held on our own server; no outside service is asked. And it makes a daily visitor estimate: a code computed with a secret that is replaced every day and never stored, so it cannot be traced back to you or linked from one day to the next. These are estimates, not a count of people.

How long we keep it: detailed records for 12 months; after that only hourly and daily totals remain, for 36 months.

Lawful basis: [to be confirmed].

Country data: IP geolocation by DB-IP, licensed under Creative Commons Attribution 4.0.

Lawful basis

[For example: legitimate interests for replying to enquiries; contract for paid services; legal obligation for financial records.]

How long we keep it

[For example: enquiries that do not become work deleted after 12 months; client and payment records kept for 6 years for tax purposes.]

Who we share it with

[Stripe (payments), the email provider, hosting. Note where any of these process data outside the UK.]

Your rights

You can ask to see, correct or delete your data, or object to how we use it, through the contact page. You can also complain to the Information Commissioner's Office (ico.org.uk).