Privacy

We collect as little as we can: an email address to send research to, and what we need to let you sign in. No analytics, no advertising cookies, no tracking pixels, no fingerprinting.

What we hold, and why

• Your email address and the page you subscribed from, when you subscribe. We use it to send our research and the short welcome sequence that follows signing up. The basis is your consent, which you can withdraw at any time with the unsubscribe link in every email.
• Account data, if you have an account: your email address, your access level, and when you last signed in. We store only a one-way hash of each sign-in link and session, never the link or session itself. The basis is providing the service you signed in for.
• Server logs: IP address, browser, page requested and time, kept for security and debugging and rotated automatically. The basis is our legitimate interest in keeping the service secure.

Who processes it for us

• Brevo sends our emails and holds the mailing list.
• Substack runs our newsletter. If you subscribe there, Substack's own privacy policy applies to what it holds.
• Our own server in the Netherlands hosts the site, the console and the database.

We do not sell or rent personal data, and we share it with no one else.

Cookies and storage

quantr.co sets no cookies. When you subscribe on a research page, your browser remembers that you did (in local storage) so the full piece stays open on your next visit; clearing your browser data removes it. The console at app.quantr.co sets one strictly necessary cookie when you sign in, to keep you signed in. The console's pages load their fonts from Google Fonts.

How long we keep it

A subscription is kept until you unsubscribe or ask us to delete it. An account is kept while it is in use and disabled, not silently erased, when access ends; ask us and we delete it. Server logs are rotated within weeks.

Your rights

You can ask to see, correct, export or delete what we hold about you, or object to how we use it, at info@quantr.co. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.