Legal
Privacy Policy
Last updated: 2 July 2026
This Privacy Policy explains how Xoopler ("we", "us", "our") collects and uses personal data when you visit xoopler.io or contact us through this website. We take your privacy seriously and process personal data in line with the EU General Data Protection Regulation (GDPR) and Dutch law.
Who we are (data controller)
Xoopler — a sole proprietorship (eenmanszaak) established in the Netherlands
Stationsplein 65, 7641 ZW Wierden, The Netherlands
KVK: 83025472
VAT/BTW: NL003765463B87
Email: hello@xoopler.io
Scope of this policy
This policy covers the xoopler.io website. Our individual products and applications each have their own privacy notice describing the data they process, provided within the app and/or its app-store listing. This is because every app handles different data for different purposes; this website policy does not govern them.
What we collect and why
When you use the contact form
We collect the name, email address and message you provide, so we can read and respond to your enquiry. Legal basis: your consent and/or our legitimate interest in responding to you (and, where relevant, taking steps at your request before entering into a contract).
Spam protection
To keep the form free of abuse we use Cloudflare Turnstile, which processes limited technical information (such as your IP address and browser signals) to distinguish humans from bots. Legal basis: our legitimate interest in the security of our website. Turnstile is designed to be privacy-preserving and does not track you across websites.
Technical data & server logs
Like any website, our hosting provider automatically processes technical data (such as IP address, browser type, pages requested and timestamps) to deliver the site securely and prevent abuse. Legal basis: our legitimate interest in operating a secure, functioning website.
Cookies
We do not use analytics, advertising or tracking cookies, and we do not track you across sites. The only cookies that may be set are strictly necessary ones used by our security/hosting provider (Cloudflare) to keep the site safe — these are exempt from consent under applicable law. If we ever introduce analytics or other non-essential cookies, we will ask for your consent first via a cookie banner.
Who we share data with
We do not sell your data. We use a small number of trusted service providers ("processors") who act on our instructions under data-processing agreements:
- Cloudflare, Inc. — website hosting, content delivery, spam protection (Turnstile) and email routing.
- Resend — delivery of the email generated when you submit the contact form.
International transfers
Some of these providers may process data outside the European Economic Area (e.g. in the United States). Where that happens, the transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
We keep contact-form messages only as long as needed to handle your enquiry and for a reasonable period afterwards (up to 12 months), then delete them. Server logs are kept for a short period for security purposes.
Your rights
Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these, email hello@xoopler.io. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Children
This website is not directed at children under 16 and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the latest version.
Contact
Questions about this policy or your data? Email hello@xoopler.io.