Privacy Policy

Last updated: 4 April 2026

Conzentor is a cookie consent management platform operated by SOAK A/S, a company incorporated in Denmark. This Privacy Policy explains how we collect, use, and protect personal data.

1. Data Controller

SOAK A/S is the data controller. Contact: privacy@conzentor.com

2. Data We Collect

2.1 Account Data

Name, email address, and authentication credentials. Passwords are hashed before storage.

2.2 Billing Data

Processed by Lemon Squeezy. We do not have access to your full credit card number.

2.3 Consent Logs

When a visitor interacts with a consent banner: hashed IP address, country code, consent choices, session identifier, user agent hash, and timestamp.

2.4 What We Do Not Collect

We do not store raw IP addresses, full user agent strings, or data that directly identifies a website visitor. All PII is hashed with SHA-256 and daily rotating salts.

3. Legal Basis

• Performance of a contract (Art. 6(1)(b) GDPR)
• Legitimate interest (Art. 6(1)(f) GDPR)
• Legal obligation (Art. 6(1)(c) GDPR)

4. Data Retention

Consent logs: 12–36 months. Account data: retained while active, deleted within 30 days of account deletion.

5. Sub-processors

• Neon — PostgreSQL hosting — Frankfurt, Germany (EU)
• Cloudflare — CDN/API — Global
• Lemon Squeezy — Billing — United States
• Resend — Email — United States

6. EU Data Residency

All consent data is stored in Frankfurt, Germany.

7. Your Rights

Access, rectification, erasure, portability, objection, restriction. Contact privacy@conzentor.com.

8. Contact

SOAK A/S — privacy@conzentor.com