Privacy Policy

MyCookieKit is a GDPR cookie consent management service operated by Sean Noon ("we", "us", "our"). Our website is mycookiekit.com.

We collect the following personal data when you use our service:

• Account data: your email address and password (stored securely via Supabase)
• Site data: the domain names and banner settings you configure
• Consent events: anonymised records of accept/decline interactions on your visitors' browsers — no IP addresses are stored, only the country code
• Billing data: handled entirely by Stripe — we never store card details

• To provide and operate the MyCookieKit service
• To process payments via Stripe
• To send transactional emails (e.g. password reset)
• To provide you with consent analytics for your sites

We do not sell your data to third parties. We do not use your data for advertising.

• Contract: processing your account and subscription data is necessary to provide the service
• Legitimate interest: analytics to improve the service
• Legal obligation: retaining billing records as required by law

We retain your account data for as long as your account is active. If you delete your account, your data is deleted within 30 days. Consent event logs are retained for 2 years to support compliance audit requirements.

• Supabase — database and authentication (EU region)
• Stripe — payment processing
• Resend — transactional email

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing or request restriction
• Data portability

To exercise any of these rights, email us at privacy@mycookiekit.com.

MyCookieKit itself uses only essential cookies required for authentication (session cookie via Supabase). We do not use tracking or advertising cookies on our own website.

For any privacy questions, contact us at privacy@mycookiekit.com.