Website Privacy Policy

This page applies exclusively to polar-bear.app (website).

Last updated: October 7, 2026

Operational notice pending legal review and confirmation of the processor register, transfers and retention periods.

1. Data controller

Data controller: Andrea Perniciano, Piazza Italia, 30 - Magnago (MI) - Italy

Privacy contact: privacy@polar-bear.app

2. Data processed on the website

  • - Contact-form fields (name, email, subject, message and selected recipient), sent by email through the configured SMTP service; the optional utm_campaign tag may also be included.
  • - Technical request data and hosting logs; configuration and retention depend on providers and must be confirmed.
  • - The browser requests the country code from ipapi.co/country_code/ for regional selection. This sends the IP address to ipapi and occurs independently of the Plausible choice; provider details, legal basis, transfers and retention still require verification.
  • - The language preference is stored in Local Storage. The analytics choice is stored in Local Storage and a technical cookie configured for up to 365 days.
  • - Only after consent, and if a domain is configured, the site sends POST events to the Plausible API, including page, URL, referrer and any event properties.
  • - The IP address is used by the contact-form rate limiter in process memory; it applies a 10-minute window and a maximum of 5 requests, but actual removal of stale keys needs verification.

3. Optional analytics

No analytics script is loaded: after consent, the site component sends POST events to https://plausible.io/api/event when NEXT_PUBLIC_PLAUSIBLE_DOMAIN is configured. Events may include the event name, full URL, referrer and properties set by the site. Consent is checked before sending; withdrawal aborts requests still in progress, but cannot retract events already received by the provider. Contracting entity, location, transfers and retention still require verification; this notice does not characterize the events as anonymous.

You can reject or withdraw Plausible consent at any time through Privacy settings. This choice does not disable the separate ipapi.co request described above.

4. Purposes and legal basis

Purposes: management of user requests, security and operational continuity of the website, service improvement.

The legal basis must be determined for each purpose and reviewed by legal counsel before final publication; this page does not conclude that assessment.

5. Retention and transfers

Actual hosting location, SMTP and analytics provider entities, transfers outside the EEA and safeguards must be confirmed in the processor register before this notice is finalized.

Actual retention periods for contact emails, technical logs, rate-limit data and analytics must be formalized; they are not represented here as verified.

6. User rights

Users may exercise their GDPR rights (access, rectification, erasure, restriction, objection, complaint) by writing to privacy@polar-bear.app.

Mobile app privacy: /privacy