ecluso Privacy Policy

Ecluso is operated by Artur Dziula, who is the controller of personal data processed by Ecluso in connection with ecluso.com. You can contact the controller at hello@ecluso.com.

This Privacy Policy explains how information is handled when you visit ecluso.com, contact Ecluso, choose to allow Google Analytics, or purchase an Ecluso product through Lemon Squeezy. It does not govern independent websites that you choose to visit through external links.

• Technical and security information. When you request a page, Ecluso's infrastructure provider may process data needed to deliver and protect the website, such as an IP address, requested URL, browser or user-agent information, timestamps, and security or diagnostic data. This information comes from your browser and network connection as part of normal web requests.
• Optional analytics information. If you select Accept in the cookie banner, Google Analytics may process information such as pages visited, referring pages, approximate location, browser and device information, interactions, and session timing. Analytics information is not collected through Google Analytics before consent.
• Contact information. If you contact Ecluso, the email address, message, attachments, and any other information you choose to provide are processed to handle your request.
• Order and customer information. If you purchase an Ecluso product through Lemon Squeezy, Ecluso may receive or access information made available in the store dashboard, such as your name, email address, order number or identifier, purchased product and variant, order value and currency, country or postal code, and related order or licence information. This information originates from the checkout you complete with Lemon Squeezy.

• Website delivery, reliability, and security. Technical information is processed where necessary for Ecluso's legitimate interests in operating a reliable website, preventing abuse, troubleshooting problems, and protecting the service and its users (Article 6(1)(f) GDPR).
• Google Analytics. Analytics is used to understand website traffic and improve the website only after your consent (Article 6(1)(a) GDPR and applicable rules concerning access to information on a user's device).
• Messages and enquiries. Information you send is processed to respond to you. Where your message concerns a contract or steps requested before entering into a contract, the basis is Article 6(1)(b) GDPR. For other enquiries, the basis is Ecluso's legitimate interest in communicating with users and handling requests (Article 6(1)(f) GDPR).
• Purchases, licences, support, and included product updates. Order information may be processed to provide and administer the purchased product or licence, provide support and included updates, and handle related requests (Article 6(1)(b) GDPR). Information may also be retained or used where necessary to comply with legal obligations (Article 6(1)(c) GDPR) or to prevent abuse and establish, exercise, or defend legal claims (Article 6(1)(f) GDPR).

Ecluso's checkout is hosted by Lemon Squeezy, which acts as Merchant of Record for purchases. When you proceed to checkout, you leave ecluso.com and provide checkout and payment information directly to Lemon Squeezy under its own terms and privacy practices.

Ecluso can access order and customer information that Lemon Squeezy makes available to the Ecluso store for order administration, licence support, and product fulfilment. Ecluso does not collect your full payment card number or card security code on ecluso.com.

For more information about Lemon Squeezy's processing, see its Privacy Policy and Buyer Terms.

Personal data may be processed by service providers only to the extent needed for the purposes described above. The main categories and providers are:

• Cloudflare. Provides website hosting, delivery, network infrastructure, and security. See Cloudflare's Privacy Policy.
• Google. Provides Google Analytics only after analytics consent. See Google's Privacy Policy.
• Lemon Squeezy. Provides the hosted checkout, Merchant of Record services, order management, product delivery, and related commerce services.
• Email and infrastructure providers. May process information necessary to deliver email correspondence or operate supporting technical services.

Ecluso does not sell personal data.

Some service providers, including Cloudflare, Google, and Lemon Squeezy, are based in or may process information outside the European Economic Area. Where personal data is transferred outside the EEA, the relevant provider uses transfer mechanisms recognised by applicable data protection law, such as an adequacy framework including the EU-US Data Privacy Framework where applicable, or European Commission Standard Contractual Clauses.

More information about the safeguards used by these providers is available in Cloudflare's Privacy Policy, Google's data transfer information, and Lemon Squeezy's Data Processing Agreement.

• Consent preference. The analytics choice remains in local browser storage until you reset it or remove the site's browser data.
• Google Analytics. Google Analytics cookies use the default periods described above unless shortened by browser restrictions or settings. User-level and event-level analytics data is retained until the retention period configured for the GA4 property expires. For standard GA4 properties, Google's available retention settings for this data are 2 or 14 months. Standard aggregated reports may remain available for longer under Google's Analytics data-retention model.
• Technical and security data. Infrastructure and security information is retained only for periods reasonably required for website delivery, security, diagnostics, abuse prevention, and any applicable legal obligations, subject to the provider's operational retention schedules.
• Correspondence. Messages are kept while the enquiry is being handled and afterwards only for as long as reasonably necessary for follow-up, record keeping, or the applicable limitation period for potential claims.
• Order and licence records. Order information is kept for as long as needed to administer the purchase, licence, support, and included product updates, and afterwards for any period required by applicable legal or tax obligations or limitation periods for claims.

Where the GDPR applies, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, and data portability where applicable. You also have the right to object to processing based on legitimate interests.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You may lodge a complaint with a competent supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).

To exercise a privacy right relating to data controlled by Ecluso, contact hello@ecluso.com. Ecluso may ask for information reasonably necessary to verify that a request relates to you.

Google Analytics is optional and refusing analytics does not prevent you from using ecluso.com. Providing information in an email is voluntary, although Ecluso may be unable to answer a request without sufficient contact information. Information required by Lemon Squeezy at checkout is necessary to complete a purchase through its service.

Ecluso does not use personal data for solely automated decision-making, including profiling, that produces legal effects or similarly significant effects for you.

ecluso.com contains links to services such as Figma, Lemon Squeezy, Dribbble, and social networks. A normal link does not by itself allow the destination website to set cookies on ecluso.com. Once you open an external website, that service's own privacy and cookie practices apply.

This policy may be updated when the website, providers, or data practices change. The current date at the top of this page indicates the latest revision.

If you have questions or requests concerning privacy at Ecluso, contact the controller at hello@ecluso.com.