Privacy Policy

How cld2day handles information and website usage data

This policy explains what personal data may be collected when you visit cld2day, how it is used, on what legal basis, and what rights you have under applicable data protection law.

Last updated: April 2026

Data controller

The data controller responsible for this website is the individual operator of cld2day, an independently maintained platform. For questions about data processing or to exercise your rights, please use the contact page.

General approach

cld2day is designed to minimize data collection. The majority of tool interactions are processed entirely in your browser — input data is not transmitted to or stored on cld2day servers unless explicitly required for a specific feature. Personal data is only processed in the limited scenarios described below.

What data is processed and why

Analytics (optional — with consent)

If you accept analytics cookies through the cookie banner, cld2day loads Google Analytics (GA4) to collect aggregated data about page visits, traffic sources, and general usage patterns. This may include IP address (anonymized), browser type, device type, referring URL, and pages visited. This data is used solely to understand how the platform is used and to improve tools and content over time.

Legal basis: Consent (GDPR Art. 6(1)(a)).
Retention: Analytics data is retained for up to 14 months in Google Analytics. Your consent preference is stored locally in your browser until you clear it.
Data processor: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. See Google's Privacy Policy.

Contact form submissions

If you submit a message through the contact form, the information you provide (such as your name, email address, and message content) may be used to respond to your inquiry and to follow up where necessary.

Legal basis: Legitimate interest in responding to direct communications (GDPR Art. 6(1)(f)).
Retention: Contact messages are retained only as long as necessary to address the inquiry and any reasonable follow-up period, typically no longer than 12 months unless ongoing communication requires otherwise.

Contact form security (Google reCAPTCHA)

The contact form uses Google reCAPTCHA v3 to detect spam and abusive automated submissions. When reCAPTCHA executes, Google may process technical request data including IP address, browser information, and behavioral signals for security and risk assessment purposes.

Legal basis: Legitimate interest in operating a secure and functional contact form (GDPR Art. 6(1)(f)).
Data processor: Google Ireland Limited. See Google's Privacy Policy and the Google Terms of Service.

Server and infrastructure logs

The web hosting infrastructure may automatically log basic technical request data (such as IP address, request path, and HTTP status code) for security monitoring, error diagnosis, and DDoS protection. This data is not used for profiling or marketing.

Legal basis: Legitimate interest in operating a secure and stable web service (GDPR Art. 6(1)(f)).
Retention: Infrastructure logs are retained in accordance with the hosting provider's standard retention policy, typically 7–30 days.

International data transfers

Google Analytics and Google reCAPTCHA are operated by Google LLC, headquartered in the United States. Data processed by these services may be transferred to and stored on servers outside the European Economic Area (EEA). Google relies on Standard Contractual Clauses (SCCs) and the EU–US Data Privacy Framework as transfer mechanisms for such transfers. See Google's data transfer documentation for details.

Cookies and similar technologies

Full details of cookies and browser storage used on this website — including names, purposes, providers, and retention periods — are available in the Cookie Policy.

Your rights under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data under the General Data Protection Regulation:

  • Right of access (Art. 15): You may request a copy of the personal data held about you.
  • Right to rectification (Art. 16): You may request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17): You may request deletion of your personal data where applicable conditions are met.
  • Right to restriction of processing (Art. 18): You may request that processing be restricted in certain circumstances.
  • Right to data portability (Art. 20): Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
  • Right to object (Art. 21): You may object to processing based on legitimate interests. cld2day will cease processing unless compelling legitimate grounds override your interests.
  • Right to withdraw consent (Art. 7): Where processing is based on consent (e.g. analytics), you may withdraw it at any time through the cookie banner without affecting the lawfulness of prior processing.

To exercise any of these rights, please use the contact page. Requests will be responded to within 30 days in accordance with GDPR Article 12.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority if you believe your personal data has been processed in violation of applicable data protection law. In Greece, the competent authority is the Hellenic Data Protection Authority (ΑΠΔΠΧ). You may also contact the supervisory authority in your country of residence within the EEA.

Third-party services

cld2day currently uses the following third-party services that may process personal data:

  • Google Analytics (GA4): Usage measurement — loaded only after consent
  • Google reCAPTCHA v3: Contact form spam protection
  • Web hosting provider: Server infrastructure and request handling

Each provider operates under its own privacy terms. cld2day does not sell or share personal data with third parties for advertising or marketing purposes.

Children's privacy

cld2day is a technical platform intended for professional and adult use. It does not knowingly collect personal data from children under the age of 16. If you believe a child has submitted personal data through this website, please contact via the contact page so it can be removed.

Policy updates

This policy may be updated to reflect changes in the platform, integrations, or applicable legal requirements. The "Last updated" date at the top of this page reflects the most recent revision. Where changes are material, reasonable notice will be provided. Continued use of the website after updates are published constitutes acceptance of the revised policy.

Related policies

This privacy policy should be read together with the Cookie Policy, Terms of Use, and Disclaimer.