Privacy policy.

Who we are

This website is operated by Metis Labs B.V., Dantelaan 115, 3533 VC Utrecht, the Netherlands (Chamber of Commerce / KVK 98939025). We are the controller for the personal data described below. For any privacy question or request, email [email protected].

What we collect, and why

Contact form. When you use our contact form we collect your name, email address, and the details you choose to share (company, the problem, what it's costing you, urgency). We use this only to respond to you and to judge whether and how we can help. Legal basis: your consent and steps taken at your request before any agreement (Art. 6(1)(a) and (b) GDPR). Submissions are stored in our own database and sent to us by email through our email provider; you also receive a confirmation email.

Analytics. We use Google Analytics and PostHog to understand in aggregate how the site is used (pages viewed, how visitors arrive, approximate location, device type). PostHog is hosted in the EU. This works in three steps:

• Before you choose. We count page views without storing anything on your device: no cookies, no browser storage, no identifier that persists after you close the tab, and no session recording. Google Analytics receives these as cookieless signals, and PostHog keeps the temporary identifier in memory only.
• If you accept. Both tools set cookies and can recognise your device across visits, and PostHog additionally records anonymised session replays with all form inputs masked, so we never capture what you type. Legal basis: consent (Art. 6(1)(a) GDPR).
• If you decline. Both stop immediately and are not loaded again on later visits. No analytics cookies are set and no session is recorded.

We don't use analytics for advertising or cross-site tracking.

Technical logs. Our hosting provider keeps standard server logs (such as IP address and requests) to keep the site secure and reliable. Legal basis: our legitimate interest in a secure, functioning website (Art. 6(1)(f) GDPR).

Who processes data for us

We work with a small number of processors, each under a data processing agreement and appropriate safeguards:

• Hosting (Railway): runs the website and stores form submissions.
• Email (Resend): delivers the notification and confirmation emails.
• Analytics (Google Analytics, and PostHog hosted in the EU): cookieless, aggregate counting before you choose; full analytics and session replay only after you consent; nothing at all if you decline.

Some of these providers may process data outside the European Economic Area. Where they do, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses. We never sell your data.

How long we keep it

• Contact submissions: for as long as needed to handle your enquiry and any resulting relationship, and at most 24 months after our last contact, after which they are deleted.
• Analytics data: retained according to our Google Analytics settings (currently 14 months) and our PostHog project settings.

Your rights

You have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. Email [email protected] and we'll handle it. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

Cookies

• A strictly necessary session cookie is used only for the admin login, not for general visitors.
• Google Analytics and PostHog cookies are placed only after you accept them in the cookie banner. Before you choose, both run without cookies or browser storage. To change your choice, clear this site's data in your browser and the banner returns.
• Your choice itself is remembered in your browser's local storage, so we can honour a refusal on your next visit.

We don't use advertising cookies.

Changes to this policy

We may update this policy as the website or the law changes. The date at the top shows the latest version.