GDPR & CCPA

This page sets out your rights under the European General Data Protection Regulation and the California Consumer Privacy Act, as they apply to the consent.app website, and how to use them. The detail of what we collect is in the Privacy Policy.

It covers this website only. The consent.app web application and the mobile apps handle personal data differently and at a far larger scale, and have their own privacy documents, shown to you when you create an account or install them. If your question is about consent records held in the product, that is where to look.

Browsing this website involves very little personal data:

• no account, no sign-up, no form to fill in;
• no advertising or tracking cookies, and no profiling of visitors;
• analytics only if you accept it, and never loaded at all if you decline;
• no access logs — we do not record the requests you make to this site — and two preferences saved on your own device.

We do not sell personal information.

XLCloud GmbH, Kaiserstraße 161, 76133 Karlsruhe, Germany, is the controller for personal data processed through this website. We have not appointed a data protection officer, as we are not required to. Requests go to privacy@consent.app.

If the GDPR applies to you, you have the right to:

• Access (Article 15): be told whether we hold personal data about you, and receive a copy.
• Rectification (Article 16): have inaccurate data corrected and incomplete data completed.
• Erasure (Article 17): have data deleted where there is no longer a reason for us to hold it.
• Restriction (Article 18): have us pause processing while a dispute about it is resolved.
• Portability (Article 20): receive data you gave us in a machine-readable format.
• Objection (Article 21): object to processing based on legitimate interest, on grounds relating to your particular situation.
• Withdrawal of consent (Article 7(3)): take back consent at any time, as easily as you gave it.

Analytics is the only thing on this website that runs on consent. You can turn it off here: open your cookie settings.

If you are a California resident, you have the right to:

• Know what categories of personal information we collect about you, where it comes from, why we collect it, and who we disclose it to.
• Delete personal information we hold about you, subject to the exceptions the law allows.
• Correct personal information that is inaccurate.
• Opt out of the sale or sharing of personal information, and of targeted advertising.
• Not be discriminated against for exercising any of these rights. We do not offer a worse experience, or a different price, to anyone who does.

On the opt-out: this website does not sell personal information, does not share it for cross-context behavioural advertising, and runs no advertising cookies. That is why there is no “Do Not Sell My Personal Information” link. If that changes, the link will appear here.

Categories collected in the last twelve months, in CCPA terms: identifiers (IP address), internet activity (pages viewed, referring page, browser and device information), and, where you have accepted analytics, inferences drawn from that activity. We collect no sensitive personal information through this website.

Email privacy@consent.app and tell us what you want. There is no form to complete and no fee.

We answer GDPR requests within 1 month. Complex requests can take up to 3 months, in which case we tell you. CCPA requests are confirmed within 10 business days, then answered within 45 days. That 45 days can be extended once by the same period.

Because this website collects no account data, we usually cannot connect a request to a particular visitor. If you ask us to delete something, we may need details that let us find it. Where we cannot identify you in our records, we will tell you rather than guess. An authorised agent may act for you under the CCPA with written proof of authority.

If what you want is to close a consent.app account and have the data in it deleted, that is done in the product rather than here: how to delete your account.

You can complain to a data protection authority at any time. Ours is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg. You may also complain to the supervisory authority in the EU country where you live or work. California residents may contact the California Privacy Protection Agency or the state Attorney General. You are welcome to come to us first.