Legal

Privacy Policy

This policy explains what data we process when you use MyWebTools and why.

Last updated: 2026-05-28

1. Data controller

DIGIELU OÜ is the data controller for personal data processed through MyWebTools. MyWebTools is operated by DIGIELU OÜ. Contact details are at the end of this page.

2. Data we collect

Depending on how you use the service, we may process:

  • Account data — email address, password hash, plan tier, session tokens, and billing customer references linked to your user record.
  • QR code data — labels, destination URLs, static/dynamic settings, colours, and related configuration you save in the app.
  • Scan analytics — for dynamic QR codes we log scan events (timestamp, QR identifier, and a privacy-preserving hash of the visitor IP, not the raw IP).
  • Uploaded logos — image files you attach to QR codes, stored to render your codes.
  • Payment data — handled by Stripe. We receive subscription status, customer IDs, and invoice metadata; we do not store full card numbers.
  • Transactional email — password reset and other service emails are sent via Resend using your email address and message content required for delivery.
  • Website usage — aggregated statistics via Google Analytics in production (see cookies below).
  • Technical data — browser type, approximate usage logs, and cookies (see below).

3. How we use data

We use your data to:

  • Provide and secure your account and sessions.
  • Operate QR generation, redirects, plan limits, and scan analytics.
  • Process subscriptions and comply with billing records.
  • Send transactional emails you request (e.g. password reset).
  • Improve reliability, prevent abuse, and support you when you contact us.
  • Understand aggregated website usage through Google Analytics to improve the service.

4. Legal bases (EEA / UK users)

Where GDPR applies, we rely on contract performance (providing the service), legitimate interests (security, analytics, product improvement), and consent or legal obligation where required (for example marketing cookies, if we add them later).

5. Cookies and sessions

Essential session cookies. We use HTTP-only session cookies to keep you signed in. These are required for authentication. Clearing them in your browser will sign you out.

Analytics cookies. In production we may use Google Analytics to understand aggregated website usage (for example which pages are visited and general traffic patterns). Google Analytics may set cookies or use similar technologies on your device. This data helps us improve the service. We do not use Google Analytics to sell personal data. You can control or block cookies through your browser settings; blocking analytics cookies does not affect sign-in.

We do not use third-party advertising cookies on the core app.

6. Processors and sharing

We share data only as needed to run the service, including with:

  • Stripe — payment processing and subscription management.
  • Resend — delivery of transactional emails.
  • Google (Google Analytics) — aggregated website usage statistics in production.
  • Our hosting and infrastructure providers — to store data and serve the application.

We do not sell your personal data, including through Google Analytics. We may disclose information if required by law or to protect rights, safety, and security.

7. Retention

We keep account and QR data while your account is active. After deletion or a prolonged inactive period, we delete or anonymise data within a reasonable timeframe, except where we must retain records for legal, tax, or fraud-prevention purposes (for example billing records via Stripe).

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. To exercise these rights, email mywebtools@digielu.ee. You may also lodge a complaint with your local data protection authority or with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

9. International transfers

Our providers may process data outside your country. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) offered by those providers.

10. Children

MyWebTools is not directed at children under 16. We do not knowingly collect data from children.

11. Changes

We may update this policy. Material changes will be reflected on this page with an updated "Last updated" date.

12. Contact

Privacy questions: mywebtools@digielu.ee or Contact.

Privacy Policy · MyWebTools