Draft. This text needs legal review and the company details below must be completed before the site goes live.

Privacy policy

Controller: [Legal entity name], [Business ID / VAT ID], [Street, postcode, city, country]. Contact: hello@searchmaker.io.

This website

  • No cookies, no third parties. The site sets no cookies, uses no browser storage for tracking, loads no third-party scripts or fonts and has no advertising. Fonts are served from this site. The only measurement is the privacy-friendly statistics described below.
  • Contact form. Name, e-mail address and message are stored to answer you and deleted when no longer needed.
  • Purchases. Payments are processed by Stripe, which acts as an independent controller for payment data. We receive your name, e-mail, billing address, VAT ID where given, and the order details needed to issue your license and invoice. License keys are stored with your order. Accounting records are kept as the law requires.
  • E-mail. We send your license and order e-mails, and reply to your messages. We do not send marketing e-mail without separate consent.
  • Server logs. Standard web server logs (IP address, time, URL) may be kept for security and troubleshooting for a short period.

Visitor statistics (no cookies, no consent banner)

Draft. The legal wording of this section (legal basis, controller details, retention) is a draft and must be reviewed before the site goes live. The technical description below is how the software works.

We measure how the site is used, so we can improve it and see which pages lead to a purchase. We built this ourselves: it runs on our own server, nothing is sent to an analytics company, and nothing is stored in your browser.

  • What we record: the page address (without any query string, except campaign tags such as utm_source and ref in a link that brought you here), the website you came from (the host name only, for example "google.com"), the kind of device (phone, tablet or desktop), the browser family (for example "Firefox"), the time, how long the page was visible, how far you scrolled, and a few actions such as clicking a buy button, an outbound link or a download. For a purchase we record the plan and the amount, and where the visit came from.
  • What we never record: your IP address, your full browser identification, your country or city, cookies, anything from your browser storage, or anything you type (the search demo on the home page runs in your browser and only counts that it was used).
  • How we tell visits apart without cookies: we compute a short code from your IP address and browser identification together with a secret random salt that is created each day (UTC) and kept only on our server. Only the first 16 characters of the result are stored, never the inputs. The salt is deleted after at most two days, so after that nobody (including us) can recompute the code or link a visit to a person, and your visits on different days cannot be connected.
  • If you buy: when you start a checkout we store that day's code together with the page or campaign that first brought you here on the same day. When the payment is confirmed we add a purchase record with the plan and amount to the statistics. This is how we see which sources lead to sales, without cookies. It is not linked to your name or e-mail address in the statistics.
  • Your choice: if your browser sends "Do Not Track" or "Global Privacy Control", we record nothing about your visit. Known bots and crawlers are ignored. You may also block /api/collect in your browser.
  • How long: statistics records are deleted after 14 months.
  • Why: our legitimate interest in understanding and improving the site (draft: to be confirmed by legal review). Because no cookies or browser storage are used and the data cannot identify you, we believe no consent banner is required.

The Searchmaker plugin

  • The plugin does not contact us. License keys are verified offline on your server.
  • Each plugin download is marked with your license identifier (a code derived from it is embedded in the files) so that leaked copies can be traced. We keep the license identifier, the download time and a checksum of the file, and no IP address, for as long as the license relationship lasts (draft: legal basis and retention to be confirmed by legal review). The plugin itself does not report anything back.
  • Your catalog is indexed into your own uploads folder; nothing is sent to us or to a third party.
  • Optional learning from searches (on by default, can be switched off): anonymous search terms are stored on your server without IP address, user agent or user id, for up to 35 days. You are the controller of that data and should mention it in your own privacy policy. Suggested sentence: "The shop search stores anonymous search terms without any identifier for up to 35 days to improve search results."

Your rights

You may ask for access to, correction or deletion of your personal data, restrict or object to processing, and complain to your data protection authority. Write to hello@searchmaker.io.