Privacy Policy

Who we are

Bifroster is a conversion tracking service operated from Finland. For questions about how we handle your data, contact us at privacy@bifroster.com.

What we collect and why

Waitlist signup

When you join our waitlist, we collect your email address. We use it to notify you when Bifroster becomes available and to send occasional product updates. Legal basis: your consent (GDPR Art. 6(1)(a)).

Rate limiting

To prevent abuse, we create a one-way hash of your IP address combined with the current date. The hash changes daily and cannot be reversed to recover your IP. We store the hash temporarily to count requests. Legal basis: legitimate interest in protecting our service (GDPR Art. 6(1)(f)).

Company identification (Albacross)

We use Albacross to identify which companies visit our website. Albacross matches your IP address against a database of known business IP ranges and provides company-level information (company name, industry, size). This happens only with your cookie consent. Individual visitors are not personally identified through this process. Legal basis: consent (GDPR Art. 6(1)(a)).

Cookies

We use Consently to manage cookie preferences. On your first visit, you can choose which cookies to accept:

• Necessary — required for the site to function. No consent needed.
• Analytics — Albacross company identification. Only set with your consent.

You can change your cookie preferences at any time through the cookie settings link in the page footer.

Who we share data with

We use the following third-party services to operate bifroster.com:

We do not sell your data to anyone. We do not use your data for advertising.

International transfers

Some of our processors (Vercel) operate in the United States. These transfers are covered by the EU-US Data Privacy Framework or Standard Contractual Clauses as required by GDPR Chapter V.

How long we keep data

• Waitlist emails — until you unsubscribe or the waitlist closes, whichever comes first.
• IP hashes — automatically expire daily (the hash salt rotates every 24 hours).
• Company visit data — up to 12 months, then deleted.

Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to processing based on legitimate interest
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, email privacy@bifroster.com. We respond within 30 days.

If you believe we are handling your data incorrectly, you can file a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

Children

Bifroster is a business tool. We do not knowingly collect data from anyone under 16. If you believe a child has submitted data to us, contact us and we will delete it promptly.

Changes to this policy

We may update this policy as Bifroster evolves. Material changes will be communicated to waitlist subscribers by email. The "last updated" date at the top reflects the most recent revision.