Who is responsible
Petr Drábek, Czech Republic, operates the ApiNote website and is the controller of the personal data described here. For questions or privacy requests, email apinote@beekeeperdiary.com.
This notice covers this marketing website and its forms. It does not describe data stored in the ApiNote mobile app. App stores, the separate Wix website and other external services have their own privacy information.
When you contact us
We use your name, email address, subject and message to answer your enquiry. The message also includes the submission time, website language, page path and any campaign labels carried in the page URL. Please do not send passwords, payment details or sensitive personal information.
Brevo delivers the message to our support inbox in Gmail. Replying to the message addresses our response to you. A contact request does not subscribe you to a newsletter. Our legal basis is our legitimate interest in providing support and responding to enquiries (Article 6(1)(f) GDPR).
Security and website operation
Cloudflare Turnstile checks form submissions for automated abuse. It processes technical signals such as IP address, browser and device information. The form sends a verification token to our server; Cloudflare checks it before the message or subscription request reaches Brevo. Our basis is our legitimate interest in protecting the website from spam and abuse.
The website is hosted through OpenAI Sites on Cloudflare infrastructure. Hosting and security providers receive technical request data needed to serve and protect the site. Private previews also require owner sign-in. Cloudflare separately processes certain Turnstile signals to improve bot detection, as explained in its Turnstile Privacy Addendum.
Campaign information and cookies
When present, the forms include the page path, language and these campaign labels: utm_source, utm_medium, utm_campaign, utm_content and utm_term. We use them to understand which pages and campaigns lead to enquiries or subscriptions. The form integration does not send arbitrary URL parameters, the full referring URL or your IP address to Brevo.
The website carries these labels in links, without storing them in cookies or browser storage. We do not install advertising pixels. Hosting, sign-in and security services may use technical storage necessary for their functions. External links open services governed by their own policies.
Website visits and store-link clicks
When enabled, Cloudflare Web Analytics measures page visits and website performance without analytics cookies or cross-site visitor profiles. Cloudflare receives the technical requests needed to provide this service. Its reports do not log URL query strings. Measurement runs on the public website, not local development, the Sites preview, administration or newsletter confirmation pages.
We also count clicks on links to the ApiNote App Store and Google Play listings. Our own database keeps only daily totals by store, public page path, button placement and website language. It does not store individual click histories, IP addresses, email addresses, campaign parameters or visitor identifiers. Hosting providers still process technical requests as described above. A click is not proof of an installation.
The purpose is to understand and improve how the website helps people discover ApiNote. Where personal data is processed, our basis is our legitimate interest in assessing the performance of this website (Article 6(1)(f) GDPR). We respect Do Not Track and Global Privacy Control and offer a browser-specific opt-out below. The opt-out stores only your choice locally, not an identifier. Blocking scripts or network requests can prevent measurement.
Cloudflare provides reports for the previous six months under its retention and aggregation rules. Our click totals older than 180 days are removed when another click is received or the private report is opened; no scheduled deletion job runs while the site is inactive. Reports are restricted to the website operator.
How long information is kept
Support correspondence is kept while it is needed to answer and follow up on your enquiry. Relevant records may be kept longer where necessary to resolve a dispute or meet a legal obligation; they are not kept for unrelated marketing.
Newsletter information is used for the duration of your subscription. After withdrawal, limited consent and suppression records may be retained to demonstrate your choice and prevent further unwanted messages. Unsubscribing is not the same as deleting every provider record. You can ask us to erase data that is no longer needed.
Technical logs, pending confirmations and delivery records are subject to the relevant providers’ retention controls and operational requirements. Contact us for details or a deletion request; we do not promise an automatic deletion period that has not been configured.
Who processes the information
The services involved are Brevo for email and newsletter management, Google Gmail for support correspondence, and OpenAI Sites and Cloudflare for hosting and security. We do not sell your personal data. We share it only for these purposes or where required by law.
These providers may process data outside the European Economic Area. Where applicable, transfers require safeguards under data protection law, such as an adequacy decision or standard contractual clauses. Provider privacy information is linked below; you can contact us about the safeguards applicable to your data.
Your choices and rights
Subject to applicable law, you can request access, correction, erasure, restriction or portability of your personal data. You can object to processing based on legitimate interests and withdraw newsletter consent at any time. Email apinote@beekeeperdiary.com; we may need enough information to verify the request.
You can complain to your local data protection authority, including the Czech Office for Personal Data Protection (ÚOOÚ). We do not use these forms for automated decisions that produce legal or similarly significant effects. We will update this notice when the website’s data practices change.
Provider privacy information
Your analytics preference
This choice applies to this browser. All website features work without measurement.
Loading your preference…