Privacy
Privacy policy.
The short version: we collect only the minimum needed to reply to you, sign you up for our newsletter if you ask, and understand how the site is used — and only if you agree. We never sell your data, never use advertising trackers, and we name every company that touches your data in the sub-processor list below.
Last updated: April 2026
Who we are
This privacy notice applies to the tucario.com website. Tucario is the controller for any personal data collected via this site. For questions or to exercise any of the rights listed below, email hello@tucario.com.
What we collect, and why
Contact form
When you fill out the contact form (or the "notify me" / "talk to us" variants embedded on product pages), we collect:
- Your name (optional)
- Your email address (required)
- Your company (optional)
- The message you wrote
- The page/source that triggered the submission (e.g.
contact-page,dqs-notify)
Purpose: replying to you and following up on the conversation. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — you contacted us first, we respond. We keep this data until the conversation is clearly over, then delete it.
Newsletter signup
If you subscribe via the footer on any page, we store your email address.
Purpose: sending you a welcome email and future product updates. Legal basis: consent (Art. 6(1)(a)). Every newsletter email contains a one-click unsubscribe link that immediately removes you from the list. You can also unsubscribe by emailing us.
Anti-bot challenges
Before submitting a form, you may be challenged by Cloudflare Turnstile — a privacy-respecting CAPTCHA alternative that does not use cookies or track you across sites. It only verifies that you are human.
Product analytics (optional)
If — and only if — you click "I agree" on our cookie banner, we load PostHog (EU Cloud) to understand how the site is used. We capture pageviews, clicks, and form submission events. We do not:
- Record your session or capture mouse movements
- Store your IP address (masked server-side)
- Share the data with ad networks or third parties
- Assign a profile to anonymous visitors (we use
identified_only)
If you click "Reject", PostHog is never loaded. Your choice is stored in
your browser's localStorage under the key tucario-analytics-consent,
not in a cookie. Legal basis: consent (Art. 6(1)(a)).
Sub-processors
These are the companies that process your data on our behalf. All of them have a Data Processing Agreement in place with us.
| Provider | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Cloudflare, Inc. | Marketing website hosting (Cloudflare Pages), DNS, edge TLS, Turnstile anti-bot challenges, Pages Functions runtime. | Global anycast | Standard Contractual Clauses (SCCs) |
| PostHog Inc. (EU Cloud) | Product analytics — pageviews, clicks, form submission events. IPs masked, no session recording, no third-party advertising cookies. Loaded only if you accept the cookie banner. | EU (Frankfurt) | Intra-EEA (EU Cloud instance) |
| Maileroo | Transactional email delivery — contact form auto-replies, owner notifications, newsletter welcome messages. | EU | Intra-EEA |
| CampaignLark (Maileroo) | Contact and newsletter list storage, tagging, and sending. We store your email, name, and the message you sent us. | EU | Intra-EEA |
Marketing website hosting (Cloudflare Pages), DNS, edge TLS, Turnstile anti-bot challenges, Pages Functions runtime.
- Location
- Global anycast
- Transfer
- Standard Contractual Clauses (SCCs)
Product analytics — pageviews, clicks, form submission events. IPs masked, no session recording, no third-party advertising cookies. Loaded only if you accept the cookie banner.
- Location
- EU (Frankfurt)
- Transfer
- Intra-EEA (EU Cloud instance)
Transactional email delivery — contact form auto-replies, owner notifications, newsletter welcome messages.
- Location
- EU
- Transfer
- Intra-EEA
Contact and newsletter list storage, tagging, and sending. We store your email, name, and the message you sent us.
- Location
- EU
- Transfer
- Intra-EEA
Your rights
Under GDPR you have the following rights:
- Access. Ask us what personal data we hold about you.
- Rectification. Ask us to correct any inaccurate or incomplete data.
- Erasure (right to be forgotten). Ask us to delete your personal data. We will, unless we are legally required to retain it (e.g. for tax records).
- Restriction. Ask us to stop processing your data while we resolve a dispute.
- Portability. Ask for a machine-readable copy of your data.
- Objection. Object to processing based on legitimate interest. Specifically: you can unsubscribe from our newsletter at any time with one click.
- Withdraw consent. If you accepted analytics cookies, you can change your mind any time below — this stops tracking immediately and clears your PostHog session.
To exercise any of these rights, email hello@tucario.com — we respond within 30 days. You also have the right to lodge a complaint with a supervisory authority (in Poland: UODO, uodo.gov.pl).
Manage your cookie choice
You can change your decision about product analytics at any time. Clicking the button below clears your stored choice and reopens the cookie banner.
Changes to this policy
If we materially change how we handle your data, we will update this page and bump the "last updated" date at the top. Historical versions are available in the Git history of this website's source code.