Privacy policy

This is a marketing website. We are not trying to build a profile of you. We count visits with a tool that sets no cookies, we run Google Analytics only if you accept it, and we keep whatever you send us by email for as long as it takes to reply.

[Registered company name] ([Org number]), [Street, postcode, city, Sweden], is the data controller for this website. You can reach us at hi@dundr.app.

Visit statistics, from everyone. We use Vercel Web Analytics, which sets no cookies and stores nothing on your device. It records the page you viewed, where you arrived from, your country, and your browser and device type. Visitors are counted using a hash of the incoming request that is discarded after 24 hours. We cannot identify you from it, and neither can Vercel.

Google Analytics, only if you accept. If you opt in through the cookie banner, Google Analytics 4 sets cookies and gives us a fuller picture of how people move through the site. Reject it, or ignore the banner, and the Google tag is never loaded.

Anything you send us. If you give us your email address through the site or write to us directly, we use it to reply and to let you know when Dundr opens up. We do not sell it and we do not pass it on beyond the provider that delivers the message.

Server logs. Our host, Vercel, keeps short-lived technical logs that can include IP addresses. These exist to keep the site up and to deal with abuse.

For Google Analytics and any future advertising tags, the ground is your consent under Article 6(1)(a) of the GDPR. You can withdraw it at any time through Cookie settings at the bottom of any page, and it is exactly as easy to withdraw as it was to give.

For cookieless visit statistics, server logs, and replying to your messages, the ground is our legitimate interest under Article 6(1)(f): understanding whether the site works, keeping it secure, and answering people who get in touch. You can object to this at any time.

Vercel Web Analytics and our hosting are covered by Vercel's own data protection terms. If you accept analytics, Google Analytics sends data to Google, which processes it in the United States. Those transfers rely on the EU to US Data Privacy Framework, under which Google is certified, together with the standard contractual clauses.

If that transfer is something you would rather avoid, reject analytics in the banner. The rest of the site works exactly the same.

Visit statistics are aggregated and kept for up to 12 months. Google Analytics data is deleted after 14 months at the latest. Email we keep for as long as the conversation is useful, and we delete it if you ask us to.

Vercel hosts the site and provides the cookieless statistics. Google provides Google Analytics, and only if you accept it. Resend delivers email. Each acts as a processor on our instructions, and none of them is allowed to use your data for their own purposes.

Under the GDPR you can ask for a copy of the personal data we hold about you, have it corrected or deleted, ask us to restrict what we do with it, receive it in a portable format, and object to processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time without affecting what came before.

Email hi@dundr.app and we will answer within one month. Honestly, given how little we collect here, the answer is usually short.

Tell us first and we will try to sort it out. You also have the right to complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), at imy.se.

The cookie policy lists everything stored on your device, what each item does, and how long it lasts.

If we add a tool that collects something new, we will update this page and change the date at the top. If the change affects a category you consented to, the banner will ask you again rather than assuming your old answer still stands.