Who we are
This website is operated by Mavshack Group (mavshack.se), a Swedish company that helps businesses build their own streaming. This policy explains what personal data we process on this website and why.
What data we collect
All visitors
- IP address & user agent: processed by our CDN (Cloudflare) and our web server for security and abuse prevention.
- Analytics (Google Analytics 4): only if you accept analytics cookies. GA4 then collects pseudonymous data about page views, session length, device type, and approximate location. GA4 does not log or store IP addresses.
Contact form
- What you send: your name, company (optional), email address, and message.
- How we use it: only to answer your enquiry. When you press Send, the form is delivered as an email to Mavshack. The website does not store your enquiry in a database or in files.
- Limits on repeated messages: to stop abuse, the server keeps your email address and IP address in memory for up to one hour. They are not written to disk.
- Bot protection (Cloudflare Turnstile): the form uses Cloudflare Turnstile to tell people from automated traffic. Turnstile runs small checks in your browser and gives the form a one-time token. Our server sends that token and your IP address to Cloudflare to verify it. Turnstile does not read your form entries.
Cookies
See the dedicated Cookie policy for the cookies and storage we use, their lifetime, and how to manage your consent.
Legal basis
- Security, bot protection, and your consent choice: legitimate interest (GDPR art. 6(1)(f)).
- Answering your enquiry: legitimate interest (GDPR art. 6(1)(f)) in replying to a message you sent us.
- Analytics: consent (GDPR art. 6(1)(a)), collected via the consent banner.
Data sharing
We do not sell your data. Pseudonymous analytics are shared with Google Ireland Limited (GA4 processor). Cloudflare, Inc. provides our CDN and the Turnstile bot protection. Enquiries arrive in our company mailbox, which our email provider (Google) hosts. Our web hosting is in the EEA.
International transfers
Google and Cloudflare may process data outside the EEA under Standard Contractual Clauses. You may decline analytics to keep that processing to a minimum.
Data retention
- Contact enquiries: kept in our mailbox only as long as we need them to handle your enquiry and any follow-up. You can ask us to delete them at any time.
- Rate limit data: up to one hour, in server memory only.
- Analytics: kept in Google Analytics for the retention period set on our property, at most 14 months.
- Server logs (our web server): up to 14 days, then deleted.
- Cloudflare: processes request data as our CDN and bot protection under its own privacy policy.
Your rights
Under GDPR you have the right to access, correct, or erase personal data we hold about you, and to object to or restrict processing. To exercise these rights, contact us via the email below. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Contact
Mavshack Group
Email: privacy@mavshack.se