Privacy notice
Pullsight shows the card you just pulled on your stream. To do that, and to run the beta, we handle a small amount of personal data. This notice says what, why, for how long, and what you can do about it.
Who we are
Alle Dagen B.V.
Meeboerserf 3, 3851 SR Ermelo, the Netherlands
Email: [email protected]
We are the controller of the data described here, under the EU General Data Protection Regulation (GDPR).
What we collect and why
| What | Why | Legal basis | How long |
|---|---|---|---|
| Beta waitlist: your email address, and if you tell us: where you stream, whether you're a streamer or a shop, and which form you used | To send you an invite to the beta, and to decide who to invite first | Your consent. You can withdraw it at any time by emailing us. | Until you have been invited and decided, or until you ask us to delete it; at most 24 months |
| Your account (once invited): email address, API key, plan, your settings, and monthly usage counts (requests, cards identified) | To run the service you signed up for | Performing our contract with you | While your account exists; deleted within 30 days after you close it |
| Card pictures: the plugin or app sends a small picture of the card in front of your camera | To identify the card | Performing our contract with you | Not stored: used to identify the card and then discarded |
| Your IP address | To limit how often one connection can sign up (abuse protection) | Our legitimate interest in keeping the service available | Held in memory for at most one hour; not written to disk or logs |
One cookie (pullsight_session) | Keeps you signed in, and links the questions after joining the waitlist to your sign-up | Strictly necessary for the feature you use | At most 14 days |
We use no analytics, advertising or tracking cookies, and our pages load nothing from other companies' servers (fonts are hosted by us). We don't sell your data, and we don't use it for automated decisions about you.
Who else sees it
- Cloudflare carries all traffic to our site and service (network and security). It processes your IP address and requests on our behalf, and may do so outside the EU under the EU–US Data Privacy Framework.
- Our own server, located in the Netherlands, stores everything else.
When we start sending invite emails or taking payments, we will name those providers here before we use them.
Your rights
You can ask us to show you your data, correct it, delete it, limit how we use it, or give it to you in a portable format, and you can object to processing based on our legitimate interest. Email [email protected]; we answer within a month. If you think we handle your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes
If we change how we handle your data, we update this page and the date at the top. For a significant change that affects you, we tell you by email first.