Privacy Policy

UTMConfig is operated by Rick de Klein Digital, [registered address, Netherlands], registered with the Dutch Chamber of Commerce under [KvK number]. For anything in this policy, write to info@utmconfig.com.

We are the controller for your account data. You are the controller for whatever you put into your workspace, and we process it on your behalf.

• Your account. Name, email address, and either a hashed password or the basic profile Google returns if you sign in with it. We never see your Google password.
• What you create. Workspaces, clients, naming conventions, abbreviations, generated names and tracking URLs. This is the product working, and it stays yours.
• Billing. Your plan, subscription status and renewal date. Payment is handled by Stripe and card details never reach our servers.
• Technical records. Ordinary server logs including IP address, which exist so the service can be operated and abuse can be rate limited.

We do not buy data about you, we do not sell or share what we hold, and we do not build advertising profiles.

• To provide the service you asked for. Account data and workspace content: performance of a contract.
• To take payment and keep records. Billing data: contract, and a legal obligation for invoices.
• To keep the service up and unabused. Logs and rate limiting: legitimate interest.

These are the only companies that process customer data for us.

Accounts and workspace content live in a database in the European Union. Where a processor operates outside it, the transfer relies on the European Commission's standard contractual clauses.

Two cookies you cannot turn off. One keeps you signed in. The other remembers the answer you give below, so the question is asked once rather than on every page and again on the app. Both are strictly necessary, so neither needs consent.

Before you answer the banner. Google Analytics loads on every page, but in the mode Google calls consent mode, where it is not permitted to store anything. It records that a page was viewed, and your IP address reaches Google in the process. It sets no cookie, and it cannot connect that view to any other visit you make. Nothing else runs until you have answered.

If you allow cookies. Google Analytics is permitted to store, and DataFast loads its standard script. Each sets a cookie, so a return visit is recognised as the same person rather than a new one.

If you choose to be counted anonymously. Google Analytics stays in the mode above and stores nothing, and DataFast loads a cookieless script that uses an identifier which rotates every day.

Google Analytics is configured with IP anonymisation on and both advertising features off, so it cannot feed an advertising profile. There are no advertising cookies on this site, and nothing recorded here is sold or shared.

You can change your mind by clearing this site’s data in your browser, which brings the question back on your next visit.

Your workspace content stays until you delete it or close your account. Deleting an account removes it and everything in it. Invoices are kept for seven years because Dutch tax law requires it. Server logs are short lived.

Under the GDPR you can ask for a copy of what we hold, have it corrected, have it deleted, object to processing, or ask us to send it elsewhere. Write to info@utmconfig.com and we will answer within a month.

If you think we have handled your data badly, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority. We would rather you told us first.

When this policy changes in substance we update the date at the top and tell account holders by email. Continuing to use UTMConfig after that means the new version applies.