Privacy policy
This site sets no cookies. Traffic is counted at the network edge, and how pages are used (clicks, scrolls, masked session replays) is measured by Microsoft Clarity with consent withheld by default, so Clarity writes no cookie and cannot recognise you across visits. The only personal data we hold is what you type into a form: an email address for the extract or a waitlist, a message on the contact page, and the purchase data the merchant of record shares with us to deliver what you bought.
Controller
RanThrice, a sole trader; Vectis Operating SARL, in formation, takes over this block the day the registry issues its numbers, reachable at hello@ranthrice.com. Vectis Operating SARL, a limited company in formation in Morocco (name chosen 2026-09-07, pending the registry). Its registered address and registration numbers will appear here when the registry issues them. The law of Morocco (law 09-08) applies to the controller; GDPR and UK GDPR apply because we offer products to people in the EU and the UK.
What we collect and why
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| Email address, list chosen, date and consent flag | Send the extract or a dated note when a system ships | Consent (the box you tick) | Until you unsubscribe |
| Contact form: email, subject, message | Answer you | Legitimate interest (answering a request) | 12 months |
| Order data from the merchant of record: email, product, country, order id | Deliver files and updates, handle refunds | Contract | Duration of the licence + legal retention of the merchant of record |
| Edge analytics: page, country, browser family; no cookie, no IP stored by us | Count visits | Legitimate interest | Aggregated only |
| Usage analytics (Microsoft Clarity): pages, clicks, scrolls, masked session replays, device and browser family; no cookie (consent withheld by default), IP processed by Microsoft and not stored by us | See where pages confuse people and fix them | Legitimate interest | By Microsoft: recordings 30 days, aggregates 13 months |
Processors
- Cloudflare, Inc. (USA): hosting, edge analytics, email routing.
- Microsoft Corporation (USA): Clarity usage analytics, with text inputs masked.
- MailerLite Ltd (Lithuania/EU): email lists and sending.
- Creem, Inc.: checkout, payment, invoicing, file delivery, as merchant of record and independent controller for the payment itself.
Transfers
Cloudflare, Microsoft and Creem are outside the EU/UK; transfers rely on their standard contractual clauses and, for Cloudflare and Microsoft, the EU-US Data Privacy Framework.
Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time (every email has an unsubscribe link). Write to hello@ranthrice.com; we answer within one month. You may complain to your supervisory authority (the CNIL, the ICO, or the CNDP in Morocco).
EU and UK representative
Whether a representative under GDPR art. 27 is required is under assessment and documented in a dated memo; when appointed, the contact appears here. Until then, all requests go to the address above.
Cookies
None. Clarity is loaded with consent withheld, which by its design means no cookie is written. If that ever changes, a consent banner appears before any non-essential cookie is set, and this section is rewritten.