Privacy statement and cookie policy

Who is responsible

The controller for the processing described below:

The PrivacyGroup Ltd

Postbus 302, 6500 AH Nijmegen

KvK 19752406

info@insanebra.in

For a question about your data, or to exercise any of your rights, use the contact address above.

What we process

There are three moments at which data is recorded:

• An audit — the URL you enter and the report that comes out of it: the findings, the scores and the evidence per finding. A report is reachable by anyone holding the link and is not indexed by search engines.
• The waitlist — your email address, plus the IP address, browser user agent and referring page at the moment you signed up. We use the address only to send you an invitation; it gets no newsletter and is not shared.
• A page visit — the path requested, your IP address, your browser user agent and the referring page. That is our entire visitor statistic: there is no third-party analytics service on this site and nothing goes to advertising networks.

Our legal basis

For the waitlist the basis is your consent: you hand over your address for that specific purpose, and you can withdraw it at any time by asking us to remove you from the list.

For visitor statistics and for running an audit we rely on legitimate interest: knowing how many people visit, being able to deliver the service you asked for, and being able to spot abuse. We do not use that data to build profiles and we do not combine it with other sources.

Cookies

This site sets no tracking cookies, no advertising cookies and no third-party analytics cookies. That is also why there is no cookie banner: there is nothing to refuse that we do not place.

What we do set is a single functional cookie, and only if you log in to the client portal or the admin area: a session cookie that remembers your login until you sign out. It is strictly necessary for a service you requested yourself, which is the exemption in ePrivacy Article 5(3).

How long we keep it

We keep audit reports for as long as the report link needs to stay usable, so you can revisit an audit later or compare it against a fresh run. Ask for deletion and we remove the report and its findings.

Waitlist data is kept until the beta finishes or until you unsubscribe. Visit data is kept for our own statistics and removed once it is no longer needed for that.

Sharing with others

We do not sell data and we do not share it with third parties for their own purposes. Running the service involves hosting; that party processes data solely on our instructions.

While running an audit our scanner makes requests to the site you name. That site sees our IP address and our user agent, not yours.

Your rights

You have the right to access your data, to have it corrected or deleted, to object to processing based on legitimate interest, and to receive your data in a portable format. We handle such a request within one month.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).