Skip to main content

Privacy Policy

Last Updated: December 8, 2025
Effective Date: December 8, 2025

1. Data Controller Information​

Data Controller:
Bundleport (the "Company", "we", "our", or "us")

Contact Information:

Data Protection Officer (DPO):
If you have questions about data protection, please contact: privacy@bundleport.com

2. Introduction​

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our documentation website at docs.bundleport.com (the "Site"). This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the ePrivacy Directive (2002/58/EC), and other applicable data protection laws.

3. Legal Basis for Processing (GDPR Article 6)​

We process your personal data based on the following legal bases:

  • Consent (Art. 6(1)(a)): For analytics cookies and non-essential tracking technologies. You can withdraw your consent at any time.
  • Legitimate Interest (Art. 6(1)(f)): For essential cookies necessary for website functionality and security.

4. Information We Collect​

4.1 Automatically Collected Information​

When you visit our Site, we may automatically collect certain information about your device and how you interact with our Site, including:

  • Usage Data: Pages visited, time spent on pages, click patterns, search queries
  • Device Information: Browser type and version, operating system, device type, screen resolution
  • IP Address: Your IP address (anonymized by Google Analytics - last octet removed)
  • Referrer Information: The website that referred you to our Site
  • Date and Time: Timestamp of your visit

4.2 Cookies and Tracking Technologies​

We use cookies and similar tracking technologies to track activity on our Site and store certain information. Cookies are small text files placed on your device.

Cookie Categories:

Essential Cookies (Strictly Necessary)​

These cookies are necessary for the Site to function properly and cannot be disabled. They enable core functionality such as:

  • Security and authentication
  • Network management
  • Accessibility features
  • Cookie consent preferences storage

Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) - necessary for website operation.

Retention: Session cookies (deleted when browser closes) or up to 12 months for preference storage.

These cookies help us understand how visitors interact with our Site by collecting and reporting information anonymously. We use Google Analytics 4 (GA4) for this purpose.

Cookies Used:

  • _ga: Used to distinguish users (expires after 2 years)
  • _gid: Used to distinguish users (expires after 24 hours)
  • _gat: Used to throttle request rate (expires after 1 minute)
  • _ga_<container-id>: Used to persist session state (expires after 2 years)

Legal Basis: Consent (Art. 6(1)(a) GDPR) - you can withdraw consent at any time.

Purpose:

  • Analyze website traffic and usage patterns
  • Understand which pages are most useful
  • Improve content organization and user experience
  • Generate anonymous statistics

Data Processing: Google Analytics processes data on our behalf. Data is anonymized (IP addresses are truncated).

5. How We Use Your Information​

We use the information we collect for the following purposes:

  1. Website Functionality: To ensure the Site operates correctly and securely
  2. Analytics and Improvement: To understand how users navigate our Site and improve content
  3. User Experience: To identify and fix issues, improve content organization
  4. Security: To detect and prevent fraud, abuse, and security issues
  5. Legal Compliance: To comply with legal obligations

6. Google Analytics - Third-Party Data Processing​

6.1 Service Provider Information​

We use Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

For users in the European Economic Area (EEA):

  • Data Processor: Google Ireland Limited (GDPR-compliant)
  • Data Processing Agreement: We have a Data Processing Agreement with Google
  • Standard Contractual Clauses: Google uses Standard Contractual Clauses (SCCs) for international data transfers

For users outside the EEA:

  • Data may be processed by Google LLC in the United States
  • Transfers are protected by Google's certification under the EU-U.S. Data Privacy Framework

6.2 What Google Analytics Does​

Google Analytics uses cookies to help us analyze how users use our Site. The information generated by the cookie about your use of the Site (including your anonymized IP address) will be transmitted to and stored by Google.

Google may use this data to:

  • Evaluate your use of the Site
  • Compile reports on Site activity
  • Provide other services relating to Site activity and internet usage

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

6.3 Your Options​

You can opt-out of Google Analytics by:

For more information:

We use Silktide Consent Manager to manage your cookie preferences and ensure compliance with privacy regulations such as GDPR and CCPA.

Your Consent Options:

  • Accept All Cookies: Allow all cookies including analytics
  • Reject Non-Essential Cookies: Only allow essential cookies
  • Manage Preferences: Change your cookie preferences at any time via the cookie icon

Consent Withdrawal: You can withdraw your consent at any time by:

  1. Clicking the cookie icon in the bottom corner of the Site
  2. Adjusting your preferences
  3. Clearing your browser cookies

Your consent preferences are stored in a cookie and will be remembered for future visits (up to 12 months).

8. Data Sharing and Disclosure​

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

8.1 Service Providers​

  • Google Analytics: For website analytics (as described above)
  • Hosting Providers: For website hosting and infrastructure
  • Cloudflare: For content delivery and security (Cloudflare Pages)

All service providers are contractually bound to protect your data and use it only for specified purposes.

We may disclose your information when required by law, court order, or governmental authority, or to protect our rights, property, or safety.

8.3 Business Transfers​

In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

9. International Data Transfers​

Your information may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States.

Safeguards for International Transfers:

  • Standard Contractual Clauses (SCCs): We use EU-approved SCCs for transfers to countries without adequate data protection laws
  • EU-U.S. Data Privacy Framework: Google is certified under the EU-U.S. Data Privacy Framework
  • Adequacy Decisions: Some countries have been deemed adequate by the European Commission

By using our Site, you consent to the transfer of your information to these countries, subject to the safeguards described above.

10. Data Retention​

We retain your information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

  • Analytics Data: Retained for up to 26 months (Google Analytics default retention period)
  • Cookie Preferences: Retained for up to 12 months
  • Essential Cookies: Session-based or up to 12 months
  • IP Addresses: Anonymized immediately by Google Analytics

After the retention period, data is automatically deleted or anonymized.

11. Your Rights Under GDPR​

Depending on your location, you have the following rights regarding your personal information:

11.1 Right of Access (Article 15)​

You have the right to request access to your personal information and receive a copy of the data we hold about you.

11.2 Right to Rectification (Article 16)​

You have the right to request correction of inaccurate or incomplete personal information.

11.3 Right to Erasure / "Right to be Forgotten" (Article 17)​

You have the right to request deletion of your personal information when:

  • The data is no longer necessary for the original purpose
  • You withdraw consent
  • The data has been unlawfully processed

11.4 Right to Restrict Processing (Article 18)​

You have the right to request limitation of processing of your personal information.

11.5 Right to Data Portability (Article 20)​

You have the right to receive your personal information in a structured, commonly used, and machine-readable format.

11.6 Right to Object (Article 21)​

You have the right to object to processing of your personal information based on legitimate interests.

11.7 Right to Withdraw Consent (Article 7)​

You have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

11.8 Right to Lodge a Complaint (Article 77)​

You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights.

EU Supervisory Authorities:

11.9 How to Exercise Your Rights​

To exercise any of these rights, please contact us at:

  • Email: privacy@bundleport.com
  • Subject Line: "GDPR Data Subject Request"
  • Include: Your name, email address, and specific request

We will respond to your request within 30 days (or 60 days for complex requests) as required by GDPR.

12. Automated Decision Making and Profiling​

We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

13. Data Security​

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption in transit (HTTPS/TLS)
  • Secure hosting infrastructure
  • Regular security assessments
  • Access controls and authentication
  • Data minimization principles

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

14. Data Breach Notification​

In the event of a data breach that poses a risk to your rights and freedoms, we will:

  1. Notify the relevant supervisory authority within 72 hours (GDPR Article 33)
  2. Notify affected individuals without undue delay if the breach poses a high risk (GDPR Article 34)

15. Children's Privacy​

Our Site is not intended for children under the age of 16 (GDPR requirement) or 13 (COPPA requirement for U.S. users). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@bundleport.com, and we will delete such information.

16. Changes to This Privacy Policy​

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last Updated" date
  • For significant changes, we may provide additional notice via email or a banner on the Site

Your continued use of the Site after changes constitutes acceptance of the updated policy.

17. Contact Us​

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For Privacy Inquiries:

For General Inquiries:

For Data Subject Requests (GDPR):

  • Email: privacy@bundleport.com
  • Subject: "GDPR Data Subject Request"
  • Response Time: Within 30 days (or 60 days for complex requests)

What Are Cookies?​

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and provide information to website owners.

How We Use Cookies​

We use cookies to:

  • Remember your cookie preferences
  • Analyze how you use our Site (via Google Analytics) - requires your consent
  • Improve the functionality and user experience of our Site
Cookie NamePurposeDurationType
Cookie consent preferencesStores your cookie consent choices12 monthsFirst-party
Session cookiesMaintains session stateSessionFirst-party
Cookie NamePurposeDurationLegal Basis
_gaDistinguishes unique users2 yearsConsent (Art. 6(1)(a))
_gidDistinguishes unique users24 hoursConsent (Art. 6(1)(a))
_gatThrottles request rate1 minuteConsent (Art. 6(1)(a))
_ga_<container-id>Persists session state2 yearsConsent (Art. 6(1)(a))

Third-Party Cookies:

  • Google Analytics: Sets cookies as described above
  • Silktide Consent Manager: Sets cookies to remember your consent preferences

Managing Cookies​

You can manage your cookie preferences at any time by:

  1. Using our cookie consent banner: Click the cookie icon in the bottom corner of the Site
  2. Browser settings: Adjust your browser settings to refuse or delete cookies
  3. Browser extensions: Use extensions like uBlock Origin or Privacy Badger
  4. Google Analytics Opt-out: Install the Google Analytics Opt-out Browser Add-on

Note: Disabling essential cookies may affect the functionality of our Site. Disabling analytics cookies will not affect core functionality.

Third-Party Services​

We use the following third-party services that may set cookies:

  • Google Analytics: Analytics and performance monitoring (requires consent)
  • Silktide Consent Manager: Cookie consent management (essential)
  • Cloudflare: Content delivery and security (essential)

For more information about these services and their use of cookies, please refer to their respective privacy policies.

This Privacy Policy is effective as of December 8, 2025 and applies to all users of docs.bundleport.com.

Legal Compliance: This policy complies with:

  • General Data Protection Regulation (GDPR) (EU) 2016/679
  • ePrivacy Directive (2002/58/EC) as amended
  • California Consumer Privacy Act (CCPA) where applicable
  • Other applicable data protection laws