Privacy policy

Last updated December 13, 2025

This Privacy Policy describes how Kreechr s.r.o. (the legal entity behind the Cookifi brand, referred to herein as "Cookifi", "we", or "us") processes personal data when providing our Consent Management Platform (CMP) to business customers.

1. Introduction

Cookifi is a B2B Consent Management Platform (CMP) developed and operated by:
Kreechr s.r.o
Vrútocká 35, 82104 Bratislava
Slovakia
VAT ID: SK2121932417
Email: matt@cooki.fi

We help organisations comply with data protection laws like the GDPR by enabling them to collect, store, and manage user consent on their websites.

We process personal data both in relation to our own users (e.g., our business customers) and their visitors, who interact with Cookifi consent notices.

We are committed to protecting your privacy and complying with all applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Scope

This Privacy Policy applies to personal data we process in relation to:

It does not apply to the data that our customers may collect on their own websites or digital properties through the use of analytics, marketing, or other tracking tools - even if those tools are triggered based on a user’s consent choice captured via Cookifi.

Our platform does not collect personal data from your website visitors. We only facilitate the presentation of a consent notice and store proof of consent (i.e., logs of the consent choice, timestamp, and related metadata). Customers remain solely responsible for ensuring that any data collection they perform - including via Google Tag Manager, tracking pixels, or embedded scripts - is done lawfully and in accordance with applicable data protection laws.

3. What Personal Data We Collect

When you use our app or sign up:

  • Full name
  • Email address
  • Phone number
  • Company name & address
  • Google account data (when signing in with Google OAuth)
  • Stripe / payment identifiers (including but not limited to Tax ID) related to billing
When you visit our website — only if you have given consent for analytics/tracking:
  • Browser and device metadata
  • Country (based on IP geolocation — anonymised)
  • Network speed
  • Heatmap and session replay data (via Microsoft Clarity and PostHog)
  • Analytics data such as pages visited, time on site, and interactions (via Google Analytics and PostHog)
  • Basic usage statistics (via PostHog)
We do not collect sensitive personal data.

4. How We Collect Your Data

We collect data in several ways:

  • Direct input / interaction: when you sign up, configure settings, or contact us
  • OAuth / external integrations: including but not limited to Google sign-in, Stripe for subscription billing and payment information
  • Scripts and analytics (after consent, if applicable): including but not limited to Google Analytics, Microsoft Clarity, PostHog to help us understand how users interact with our website.
  • Indirect sources / infrastructure: server logs, Amazon Web Services (AWS), CDN asset requests

Analytics and tracking via GA & Clarity are triggered only after the user’s explicit consent via our consent banner.

5. How We Use Your Data

We use the collected personal data to:

  • Provide and maintain your access to the Cookifi platform
  • Handle account management, billing, and payments
  • Send transactional and support-related communications
  • Analyse and monitor usage, performance, and infrastructure health
  • Enhance, troubleshoot, and secure our platform
  • Detect and prevent fraud, misuse, and security incidents
  • Comply with legal, regulatory, tax, and accounting obligations

6. Legal Basis for Processing

We rely on the following legal bases, as defined under the General Data Protection Regulation (GDPR):

  • Contractual Necessity: For processing necessary to provide you with access to the Cookifi platform and fulfill our contractual obligations.
  • Legitimate Interest: For processing that is essential to operate our website and services securely and efficiently, such as fraud prevention and necessary cookies. We ensure these interests do not override your fundamental rights.
  • Consent: For all optional processing, such as the use of analytics, marketing, and preference cookies, as well as for sending marketing communications. Consent is collected via our consent notice and can be withdrawn at any time.
  • Legal Obligation: When we are required to process your data to comply with applicable laws and regulations.

7. How We Store and Retain Your Data

  • Data is stored on servers located in Frankfurt, Germany.
  • We retain your data for as long as your account is active, or until you request deletion. If you manually delete your account, all associated data is permanently deleted immediately.
  • If you cancel your subscription, all associated data will be deleted after a 14-day grace period, unless you explicitly request otherwise. This grace period allows for recovery in case of accidental cancellation.
  • We do not perform automatic data deletion due to inactivity.

You may request deletion at any time by contacting us at matt@cooki.fi.

8. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Correct inaccuracies
  • Request deletion
  • Object to or restrict processing
  • Receive your data in a portable format

We will respond to all requests within one month. Please contact us at matt@cooki.fi.

9. Cookies and Tracking Technologies

We use cookies to personalise content, analyse traffic, and provide social media features.

For the list of up-to-date list, please refer to our live Cookie Declaration here: Open Cookie Preferences

You can review, update or withdraw your consent at any time by clicking the floating action button, which opens our consent notice.

10. Sharing Data with Third Parties

We may share limited data with:

  • Hosting: Amazon Web Services (AWS), with servers located in Frankfurt, Germany
  • Analytics: Google Analytics, Microsoft Clarity, PostHog
  • Billing: Stripe
We never sell or trade your data.

11. Children’s Privacy

Our service is strictly for business use only. We do not knowingly collect personal data from individuals under 18. If you are a parent or guardian and believe your child has provided us data, please contact us.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated clearly through our platform or email.

13. Contact

For any privacy-related questions or requests, contact us at:
Email: matt@cooki.fi