Skip to content
otworzxades.pl

Privacy policy

The controller of your data is [NAZWA OPERATORA], [ADRES], email: shidin@shidin.com.

The files you open

The files you open on the site are processed only in your browser. We don't send them to any server, we don't store them and we have no access to them. This includes the data in the signature, such as names and PESEL numbers.

Statistics

If you agree, we use Google Analytics 4 (Google Ireland Limited) to count visits and see which pages help. Google Analytics stores cookies in your browser (_ga, _ga_*) and processes, among other things, your IP address, approximate location, device details and the pages you visit. We also record events such as "file chosen" or "PDF saved", without file names and without their content. Advertising features are off.

The legal basis is your consent (Art. 6(1)(a) GDPR). Data may be transferred to the USA under the EU-US Data Privacy Framework and is kept in Google Analytics for 14 months. Without your consent we don't load Google Analytics. You can withdraw your consent at any time with the "Cookie settings" button at the bottom of the page.

Error reports

When an error happens on the site or in the app, we send a technical report to Sentry (Functional Software, Inc.): the type of error, the browser or system version and the place in the code. A report never contains the files you open, their names or their content. The legal basis is our legitimate interest in keeping the service working (Art. 6(1)(f) GDPR). We keep reports for up to 90 days.

The Otwórz XADES app for iPhone

The app opens files only on your phone and never sends them anywhere. Subscriptions are sold by Apple; to check whether a subscription is active we use Adapty (Adapty Tech Inc.), which receives an anonymous installation ID and the purchase history. Unless you turn it off in the app's settings, we send anonymous usage statistics (PostHog Inc.): the type of file opened and which features are used, never file names or their content. Error reports work as described above.

Payments

Payments are handled by Creem (creem.io), which is the seller (Merchant of Record) and the controller of the data needed for the payment, such as your email address and card details. From Creem we only receive order and customer IDs and which plan you bought.

After a purchase we store an anonymous token in your browser that unlocks saving documents. It contains no personal data.

Contact form

If you write to us, we process your email address and your message in order to reply (Art. 6(1)(f) GDPR). We keep them for 12 months after the last message.

Server logs

The server that handles payments and the form keeps technical logs (including IP address and time of the request) for security. We delete the logs after 30 days.

Your rights

  • the right to access, correct and erase your data,
  • the right to restrict processing and to object,
  • the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

To use these rights, write to shidin@shidin.com.