Privacy Policy

UTMConfig is operated by Rick de Klein Digital, [registered address, Netherlands], registered with the Dutch Chamber of Commerce under [KvK number]. For anything in this policy, write to info@utmconfig.com.

We are the controller for your account data. You are the controller for whatever you put into your workspace, and we process it on your behalf.

• Your account. Name, email address, and either a hashed password or the basic profile Google returns if you sign in with it. We never see your Google password.
• What you create. Workspaces, clients, naming conventions, abbreviations, generated names and tracking URLs. This is the product working, and it stays yours.
• Billing. Your plan, subscription status and renewal date. Payment is handled by Stripe and card details never reach our servers.
• Technical records. Ordinary server logs including IP address, which exist so the service can be operated and abuse can be rate limited.

We do not buy data about you, we do not sell or share what we hold, and we do not build advertising profiles.

• To provide the service you asked for. Account data and workspace content: performance of a contract.
• To take payment and keep records. Billing data: contract, and a legal obligation for invoices.
• To keep the service up and unabused. Logs and rate limiting: legitimate interest.

These are the only companies that process customer data for us.

Accounts and workspace content live in a database in the European Union. Where a processor operates outside it, the transfer relies on the European Commission's standard contractual clauses.

Two cookies you cannot turn off. One keeps you signed in. The other remembers the answer you give below, so the question is asked once rather than on every page and again on the app. Both are strictly necessary, so neither needs consent.

The banner decides one thing. It governs Google Analytics and nothing else. There are two measurement tools on this site, they answer to different rules, and describing them separately is more honest than letting one banner imply it covers both.

Google Analytics, before you answer. It loads on every page, but in the mode Google calls consent mode, where it is not permitted to store anything. It records that a page was viewed, and your IP address reaches Google in the process. It sets no cookie, and it cannot connect that view to any other visit you make.

If you allow cookies. Google Analytics is permitted to store. It sets a cookie, so a return visit is recognised as the same person rather than a new one.

If you choose to be counted anonymously. Google Analytics stays in the mode above and stores nothing. Your visit is counted; it is not linked to any other.

Google Analytics is configured with IP anonymisation on and both advertising features off, so it cannot feed an advertising profile. There are no advertising cookies on this site, and nothing recorded here is sold or shared.

OpenAnalytics runs whatever you answer. It records the address of the page, its title, the page you arrived from, and how long you stayed. It sets no cookie and keeps no lasting identifier: what it stores is a session number your browser throws away when you close the tab, so it cannot recognise you as the same person on a later visit. What it collects is held on servers in the European Union and is not transferred to the United States.

It does honour two signals your browser can send on its own, without you having to ask us. With either Do Not Track or Global Privacy Control switched on, it collects nothing at all.

You can change your mind by clearing this site’s data in your browser. That removes the answer you gave and the OpenAnalytics identifier together, and brings the question back on your next visit.

Your workspace content stays until you delete it or close your account. Deleting an account removes it and everything in it. Invoices are kept for seven years because Dutch tax law requires it. Server logs are short lived.

Under the GDPR you can ask for a copy of what we hold, have it corrected, have it deleted, object to processing, or ask us to send it elsewhere. Write to info@utmconfig.com and we will answer within a month.

If you think we have handled your data badly, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority. We would rather you told us first.

When this policy changes in substance we update the date at the top and tell account holders by email. Continuing to use UTMConfig after that means the new version applies.