Privacy policy
This site sets no cookies. Traffic is counted at the network edge, and how pages are used (clicks, scrolls, masked session replays) is measured by Microsoft Clarity with consent withheld by default, so Clarity writes no cookie and cannot recognise you across visits. A Metricool image pixel counts visits and the country they come from, also without a cookie. The only personal data we hold is what you type into a form: an email address for the extract or a waitlist, a message on the contact page, and the purchase data the merchant of record shares with us to deliver what you bought.
Controller
RanThrice, a sole trader; Vectis Operating SARL, in formation, takes over this block the day the registry issues its numbers, reachable at hello@ranthrice.com. Vectis Operating SARL, a limited company in formation in Morocco (name chosen 2026-09-07, pending the registry). Its registered address and registration numbers will appear here when the registry issues them. The law of Morocco (law 09-08) applies to the controller; GDPR and UK GDPR apply because we offer products to people in the EU and the UK.
What we collect and why
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| Email address, list chosen, date and consent flag | Send the extract or a dated note when a system ships | Consent (the box you tick) | Until you unsubscribe |
| With that signup: the language of the page you signed up on (kept with the list name) and the two-letter country our network reports for the request (never your IP address) | Decide which pages are worth translating, and in which language to write to you | Legitimate interest | With the signup, until you unsubscribe |
| Contact form: email, subject, message | Answer you | Legitimate interest (answering a request) | 12 months (the message is forwarded to our mailbox through Brevo; the site itself stores nothing) |
| Order confirmation email, sent through Brevo: your email address, the product name, our order reference and the time you ticked the withdrawal box | Confirm your order on a durable medium and restate the waiver of the 14-day right of withdrawal that you ticked | Legal obligation (confirmation of the waiver, directive 2011/83 art. 8(7)(b)) | Not stored by the site beyond a log line with the order reference; Brevo keeps technical sending logs under its own terms |
| Order data from the merchant of record: email, product, country, order id | Deliver files and updates, handle refunds | Contract | Duration of the licence + legal retention of the merchant of record |
| Edge analytics: page, country, browser family; no cookie, no IP stored by us | Count visits | Legitimate interest | Aggregated only |
| Usage analytics (Microsoft Clarity): pages, clicks, scrolls, masked session replays, device and browser family; no cookie (consent withheld by default), IP processed by Microsoft and not stored by us | See where pages confuse people and fix them | Legitimate interest | By Microsoft: recordings 30 days, aggregates 13 months |
| Visit count (Metricool pixel): one image request per visit, from which Metricool reads the country and the site address (never the page path); no cookie, IP processed by Metricool and not stored by us | Count visits alongside our social media statistics | Legitimate interest | By Metricool, under its own policy |
Processors
- Cloudflare, Inc. (USA): hosting, edge analytics, email routing.
- Microsoft Corporation (USA): Clarity usage analytics, with text inputs masked.
- Metricool Software, S.L. (Spain/EU): visit counting through an image pixel.
- Brevo (Brevo group, France/EU and other countries): sends the order confirmation email and forwards contact form messages to our mailbox, as a processor acting on our instructions. If a confirmation cannot be sent twice in a row, the unsent message, with the buyer's address, is forwarded to our own address. Brevo's data processing agreement, Appendix 3 of its terms of use (version of 1 October 2025, read on 2026-10-09), lists hosting servers in France (OVH) and Belgium (Google Cloud Platform).
- MailerLite Ltd (Lithuania/EU): email lists and sending.
- Creem, Inc.: checkout, payment, invoicing, file delivery, as merchant of record and independent controller for the payment itself.
Transfers
Cloudflare, Microsoft and Creem are outside the EU/UK; transfers rely on their standard contractual clauses and, for Cloudflare and Microsoft, the EU-US Data Privacy Framework. Brevo hosts in the EU but its data processing agreement says some processing may take place outside the EEA, under standard contractual clauses and supplementary measures and, for the United States, possibly the EU-US Data Privacy Framework.
Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time (every email has an unsubscribe link). Write to hello@ranthrice.com; we answer within one month. You may complain to your supervisory authority (the CNIL, the ICO, or the CNDP in Morocco).
EU and UK representative
Whether a representative under GDPR art. 27 is required is under assessment and documented in a dated memo; when appointed, the contact appears here. Until then, all requests go to the address above.
Cookies
None. Clarity is loaded with consent withheld, which by its design means no cookie is written, and the Metricool pixel sets none either. If that ever changes, a consent banner appears before any non-essential cookie is set, and this section is rewritten.