Privacy Policy

    Last updated: October 10, 2026

    1. Introduction

    ConsentEase ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our consent management platform.

    ConsentEase is operated by Saerens Advertising, based in Belgium, European Union. We process data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

    2. Information We Collect

    2.1 Account Information

    When you create an account, we collect:

    • Email address
    • First and last name
    • Password (encrypted)
    • Billing information (processed by Stripe)

    2.2 Website Data

    When you add websites to ConsentEase, we collect:

    • Website domain names
    • Cookie and script information from scans
    • Banner configuration preferences

    2.3 Analytics Data

    We collect consent events from your website visitors and use them to provide aggregated statistics:

    • Consent acceptance/rejection rates
    • Geographic distribution (country level only)
    • Daily consent statistics

    Providing the consent service involves processing visitor information, including consent preferences and timestamps, pseudonymized visitor identifiers, and temporary IP processing for local location lookup. We also keep each visitor's choice as a consent record (proof of consent) for the website owner; section 7 explains how long.

    2.4 Local Visitor Location Lookup

    ConsentEase estimates visitor location on its own server using a local copy of the DB-IP IP to City Lite dataset. The lookup identifies the country, a European regional classification including the EU/EEA, and, where available, a US state, including recognition of California. The European banner classification also includes the United Kingdom and Switzerland.

    For this lookup, the full IP address is used only temporarily in server memory. The location lookup does not store or log the full IP address and does not send it to DB-IP, ip-api.com, restcountries.com, or any other external geolocation provider. Country codes may be stored for consent statistics. The banner uses location data only for the optional jurisdiction badge and as a language fallback, not to change consent rules automatically.

    DB-IP supplies the dataset and receives no visitor data. For this location processing, DB-IP is a data source, not a sub-processor. IP Geolocation by DB-IP (IP to City Lite, CC BY 4.0).

    3. How We Use Your Information

    We use the information we collect to:

    • Provide and maintain our service
    • Process your subscription payments
    • Send service-related communications
    • Improve our platform and develop new features
    • Ensure compliance with legal obligations

    4. Data Sharing

    We do not sell your personal data. We may share information with:

    • Stripe: For payment processing
    • Service providers: Who help us operate our platform (hosting, analytics)
    • Legal authorities: When required by law

    DB-IP supplies the dataset for local visitor location lookup, but receives no visitor data and is not a sub-processor for this processing.

    5. Data Security

    We implement industry-standard security measures including encryption, secure data storage, and regular security audits. However, no method of transmission over the Internet is 100% secure.

    6. Your Rights (GDPR)

    Under GDPR, you have the right to:

    • Access your personal data
    • Rectify inaccurate data
    • Request deletion of your data
    • Object to processing
    • Data portability
    • Withdraw consent

    To exercise these rights, contact us at privacy@consentease.com

    7. Data Retention

    We retain your account data for as long as your account is active. Analytics data is retained for 2 years. Upon account deletion, we remove your data within 30 days, except where retention is required by law.

    Consent records (each choice a visitor makes in a ConsentEase banner) are kept on behalf of the website owner, who is the controller for them. By default, we keep each consent record until its scheduled renewal date plus 24 months, and never shorter than 365 days plus 24 months after it was recorded. The renewal date, when a visitor may be asked to choose again, is not the retention period. After that, the record becomes eligible for deletion and is deleted automatically by our daily cleanup. Website owners who need a record for longer must export it in time. The 2-year analytics period above does not apply to consent records, and deleting a website or an account can remove them earlier.

    These storage periods do not apply to the full IP address used for location lookup: that lookup uses it only temporarily in memory and does not store or log it.

    8. International Transfers

    Local visitor location lookup does not involve transfers of visitor IP addresses to external geolocation providers. If we transfer data outside the EU/EEA for other processing, we ensure appropriate safeguards are in place (Standard Contractual Clauses).

    9. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform.

    10. Contact Us

    For privacy-related questions or to exercise your rights:

    • Email: privacy@consentease.com
    • Saerens Advertising, Belgium