Data Privacy and Cookie Usage Policy

Overview

This document describes data privacy and GDPR compliance related to browser and how Frizbit uses cookies on the websites of its Customers to measure the user behaviour of their end users and provide engagement on websites of its Customers, and details about the cookies themselves. If you are looking for the privacy statement for a Customer of Frizbit, not for the end users of its Customers, please consult to Privacy Statement page.

GDPR Compliance Approach

Default Configuration

Frizbit’s core functionality operates without processing personal data. Clients have full discretion to decide whether to share any personal information. The platform enables Customers to process data in compliance with GDPR and applicable data protection laws.

Data Collection Flexibility

  • No Mandatory Personal Data: The platform functions completely without personal identifiable information
  • Optional Personal Data Usage: Clients can choose to share personal data if desired
  • Minimal Data Approach: When used, personal data collection is intentionally limited
  • User Consent: Explicit user consent is required for data collection and push notifications

Personal Data Usage Options

Clients can optionally choose to share personal data, such as:

  • IP address (for geographic segmentation)
  • Customer’s internal user ID (for cross-device behavior tracking)
  • User’s name (for personalized notifications)
  • Email / Phone Number (for additional communication channels)

Default Anonymous Tracking

If no personal data is shared:

  • Frizbit assigns a randomly generated, anonymous ID
  • No personally identifiable information is processed
  • User behavior is tracked without linking to real-world identity

Cookie Usage

Cookies Installed

Frizbit installs two primary cookies:

  • frzbt.user (Persistent Cookie)
    • Duration: 1 year
    • Purpose: Generates a random ID to recognize returning users
    • Functionality: Tracks user behavior across website visits
    • Stores:
      • Randomly generated anonymous ID
      • Unique user ID (if provided by Customer)
      • Optional user properties
    • This cookie is set by Frizbit at the first time a user visits the website of the Customer and isused to recognise users when they visit the website again and track all their behaviour on the Customer website.
  • frzbt.session (Temporary Cookie)
    • Duration: Current session only
    • Purpose: Tracks current user session

Cookie Categorization

  • Type: First-party cookies
  • Category: Functionality/Personalization cookies
  • Not: Advertising cookies

Data Collection Details

IP Address Handling (Optional)

  • Briefly collected during data collection script connection
  • Used for geographic lookup (country, region, city)
  • IP address is not retained after mapping

Personal Data (Optional)

  • No personal data is collected by default
  • Customers can optionally configure personal data collection
  • Personal data collection requires explicit user consent
  • Types of personal data can include:
    • User-provided details (email, name, etc.)

User Consent and Privacy

Push Notifications

  • Users must explicitly opt-in for web push notifications
  • Consent managed through browser’s native permission system
  • Users can withdraw consent at any time

Data Usage

  • Data used for:
    • Website engagement tracking
    • Personalized messaging
    • User behavior analysis

Security Measures

  • Data stored on OVH Cloud in Frankfurt, Germany
  • AES-256 encryption for sensitive data
  • TLS 1.2/1.3 for data transfers
  • Role-based access control (RBAC)

User Rights

Users have the right to:

  • Request data deletion
  • Opt-out of data collection
  • Withdraw push notification consent

User Privacy Safeguards

  • No collection of sensitive personal information
  • No tracking of passport, social security, or other critical personal details
  • Randomized ID ensures complete user anonymity by default

Client Integration Options

  1. Minimal Integration: No personal data shared
    • Fully anonymous tracking
    • Complete privacy preservation
  2. Optional Enriched Tracking: Frizbit offers its Customers the possibility to capture and segment personal data of their users, if they would like to. The type of personal data is to be sent to Frizbit is decided by Customer and is setup custom.

Compliance

Frizbit’s approach is designed to be:

  • GDPR compliant
  • Transparent
  • User-centric
  • Minimally invasive

Contact

For specific privacy inquiries, contact Frizbit’s legal team.

Last updated: October 22th, 2025