Privacy Policy
This policy explains what personal data Makeload collects, why, who receives it and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The data controller is IT & IoT solutions ApS, Herstedvang 8, 2620 Albertslund, Denmark. Privacy questions and requests: privacy@makeload.io.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account data: email address, name, password hash, or Google account identifier if you sign in with Google | Create and run your account, sign you in | Contract |
| Test data: the targets you test, domain verification records, test settings, results and reports, API key hashes | Provide the service, show history and comparisons | Contract |
| Technical and security data: the IP address and network (ASN) at sign-up and at each sign-in, session records, access logs | Secure accounts, detect and investigate abuse and fraud, comply with our obligations | Legitimate interest (keeping the service safe and lawful) |
| Billing data: plan, invoices and payment status. Card details go straight to Stripe and are never stored by us | Charge for paid plans, bookkeeping | Contract, legal obligation |
| Support and contact messages, and service emails such as password reset and verification | Answer you and operate the account | Contract, legitimate interest |
We do not sell personal data and do not use it for advertising or profiling.
3. Cookies and analytics
- The marketing site sets no cookies. We measure visits with a self-hosted analytics tool that does not use cookies and does not build profiles of individual visitors.
- The app uses one strictly necessary session cookie to keep you signed in, and a short-lived cookie while you sign in with Google. These need no consent.
4. How long we keep data
- Test history, results, sign-in and security logs: 365 days, then deleted.
- Account data: for as long as your account exists, and deleted when you ask us to close it, apart from what we must keep by law.
- Billing records: kept for the period required by Danish bookkeeping law, currently five years.
- Abuse records: where we have closed an account for abuse we may keep the minimum needed to stop the same person returning.
5. Who we share data with
We use the following processors, under data processing agreements. We share only what each needs.
| Processor | What for |
|---|---|
| Hetzner Online GmbH | Hosting of the application, database and test generators |
| Stripe Payments Europe, Ltd. | Payment processing and invoicing |
| Brevo (Sendinblue SAS) | Sending service emails (verification, password reset, notices) |
| BunnyWay d.o.o. (bunny.net) | Content delivery and DNS for this website; receives visitors' IP addresses to serve pages |
| Google Ireland Limited | "Sign in with Google", only if you choose it. Google acts as its own controller for your Google account |
Network ownership lookups use a geolocation database that runs on our own servers, so no IP address is sent to a third party for this. We may disclose data where the law requires it, for example to an authority or in response to a valid abuse or legal request.
6. Transfers outside the EU/EEA
Where a processor handles data outside the EU/EEA, for example Stripe or Google, the transfer relies on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses. The test generators run in several regions by design; they receive the target and test settings, not account data.
7. Security
Passwords are stored only as salted hashes, API keys are stored hashed, connections use TLS, and access to production systems is restricted and logged.
8. Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to processing, receive your data in a portable format, and withdraw consent where we rely on it. To use any of these, email privacy@makeload.io; we normally reply within one month. You may also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or to your local authority.
9. Children
Makeload is for business use and is not directed at anyone under 18.
10. Changes
If we change this policy in a material way we will tell account holders by email or in the app. The date at the top shows the current version.