Privacy Policy

How personal data is handled when you use Turnmetry.

Effective: September 17, 2026

Who is responsible

Turnmetry is operated by Arjan de Vos in the Netherlands. Privacy questions and requests can be sent to arjan@arjandevos.com.

Data we process

We process the name and email address you provide, your encrypted password, email-verification status, last login time and login count, account and security logs, session information, alert preferences, submitted product feedback, associated page and browser context, and records needed to prevent duplicate notification emails. We do not store IP addresses as part of login activity and do not request payment details or exchange credentials during the beta.

Purposes and legal basis

Account and alert data is used to provide the service you request and administer the beta. Security logs and abuse prevention are processed for our legitimate interest in operating a safe service. Optional alert emails are sent only after you enable the relevant alert type; you can disable them at any time.

Product measurement

To understand whether Turnmetry is useful, we record the UTC dates on which verified accounts open the dashboard, the first such visit, and the first observed alert opt-in. When you register, we also keep a coarse source category, a recognised campaign label and the public landing page, if available from your existing session. We do not store full referring URLs, search terms, arbitrary campaign text, IP addresses, browser fingerprints or user-agent strings for this measurement, and we add no tracking cookies. Reports contain aggregate counts and exclude the operator account. We use these limited measurements for our legitimate interest in evaluating and improving the service; you can object by contacting us.

Processors and transfers

Hosting and database providers process data to run Turnmetry. Mailjet processes email addresses and delivery data when verification, password-reset or alert messages are sent. These providers act under their own security and data-processing terms. Data may be processed outside your country where appropriate safeguards apply.

Retention

Account data is retained while your account is active and for a limited period afterwards where needed for security, disputes or legal obligations. Individual dashboard activity dates are removed after 180 days. Coarse registration attribution and first-use dates remain with your account and are deleted when the account is deleted. Operational logs and email-delivery records are periodically removed or anonymised when no longer needed. You may request account deletion.

Cookies

Turnmetry currently uses only cookies needed for login, session security, CSRF protection and interface operation. We do not currently use advertising or behavioural tracking cookies. If that changes, this policy and any required consent mechanism will be updated first.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. You may withdraw optional email preferences at any time. You may also complain to the Dutch Data Protection Authority or your local supervisory authority.

Security and changes

We use access controls, encrypted transport, password hashing, email verification and operational monitoring. No internet service is risk-free. Material policy changes will be published here and, where appropriate, communicated to registered users.