Privacy Policy

1. Overview

This Privacy Policy explains how ClipJot ("we", "our") collects and uses data when you visit this website or subscribe to product updates. We collect minimal data and never sell your personal information.

2. Data We Collect

3. How We Use Your Data

• Email address — used solely to send ClipJot release and feature update notifications. We will never use it for unrelated marketing.
• Analytics data — used in aggregate to understand traffic sources and page performance, which helps us improve the product.

4. Legal Basis (GDPR)

For the purposes of the GDPR, the Data Controller is WellBe s.r.o., Nové sady 988/2, 602 00 Brno, Czech Republic (reg. no. 05830931).

Where GDPR applies, the legal basis for processing your email address is your explicit consent (Art. 6(1)(a) GDPR), given via the subscription form. You may withdraw consent at any time by unsubscribing (see Section 6).

Analytics cookies are only set after explicit consent via the cookie banner.

5. Data Retention

We retain your email address until you unsubscribe or request deletion. Analytics data is retained per Google Analytics' default retention settings (14 months).

6. Your Rights

• Access — you may request a copy of the personal data we hold about you.
• Rectification — you may request correction of any inaccurate or incomplete personal data we hold about you.
• Deletion — you may request deletion of your email address at any time.
• Portability — you may request your personal data in a structured, commonly used, machine-readable format.
• Unsubscribe — every email we send contains an unsubscribe link. Clicking it immediately removes you from the list.
• Cookie withdrawal — you can change or withdraw cookie consent at any time by clicking "Manage preferences" in the cookie banner.

To exercise your rights, open an issue on GitHub or use the unsubscribe link in any email.

If you are in the European Economic Area, you also have the right to lodge a complaint with your local Data Protection Authority (DPA). In the Czech Republic, this is the Office for Personal Data Protection (ÚOOÚ).

7. Third Parties

We use third-party services to operate this website. See our Data Processing page for the full list. We do not sell your data to any third party.

The subscription form is protected by Google reCAPTCHA v3, which runs invisibly in the background when you submit the form. reCAPTCHA collects hardware and software information (such as device and application data) and sends it to Google to determine whether the submission is made by a human. This data is processed in accordance with Google's Privacy Policy. Your use of reCAPTCHA is also subject to Google's Terms of Service.

8. International Data Transfers

Some of the third-party services we use (including Google Analytics and Buttondown) are operated by companies based in the United States. Your data may therefore be transferred to and processed on servers outside the European Economic Area. Where this occurs, we rely on appropriate safeguards (such as Standard Contractual Clauses) as required by GDPR.

9. Cookies

We use two categories of cookies:

• Strictly necessary (persistent) — used to remember your cookie preferences. These are set regardless of your consent choice.
• Analytics / Google Analytics (persistent, third-party) — set only after you explicitly accept analytics cookies. These cookies help us understand how people use the site. If you do not accept them, the site continues to work normally.

You can also delete or refuse cookies directly in your browser settings at any time. Consult your browser's help pages for instructions. Note that disabling all cookies may affect the functionality of some websites you visit.

10. Security

We take reasonable technical and organisational measures to protect your personal data. However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, and you provide your data at your own risk.

11. Law Enforcement

Under certain circumstances we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g. a court or government agency). We will only do so to the extent required and, where permitted, will notify you.

12. Children's Privacy

This website is not directed at anyone under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with their personal data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted by updating the "Last updated" date above.