Privacy Policy

1. Data controller

The controller is responsible for the processing of personal data connected with the operation of Numbivo.

2. What data Numbivo processes and why

Technical data and server logs

When you visit the website, the web server or hosting infrastructure may process technical data such as IP address, date and time, requested URL, referrer, browser/user-agent information and error/security information. This is used to deliver the website, diagnose failures, prevent abuse and protect the service.

Bootstrap delivery through jsDelivr

Numbivo currently loads the Bootstrap interface library from the jsDelivr content delivery network at cdn.jsdelivr.net. The browser therefore connects directly to jsDelivr and its delivery providers, which can receive the IP address and other technical request information such as the requested file, date/time, referrer and browser headers. The purpose is reliable and efficient delivery of the layout and interface framework. jsDelivr states that its CDN service does not use cookies or track individual users. See the jsDelivr Privacy Policy.

Contact by email

If you contact us at contact@numbivo.com, we process the email address, message content and any information you voluntarily provide in order to answer your request and keep necessary correspondence records.

Saved calculator results

The “Save result” feature stores calculator fields and result previews locally in your browser using IndexedDB. The full calculation and the values you enter are not uploaded to Numbivo by this feature. They remain on that browser/device until you delete the save or clear browser data.

When a result is saved, Numbivo records a minimal application event on the server: date/time, calculator name/path and module version. The application event does not include the values entered in calculator fields or the calculated result. These application-level event files are automatically removed after 180 days.

Google Analytics

Numbivo uses Google Analytics 4 to understand how the website is found and used and to improve navigation, content and technical quality. The Google tag with measurement ID G-W7BD98HN03 is blocked by default and is loaded on eligible Numbivo pages only after the visitor accepts analytics. It is never loaded on Numbivo legal and privacy pages.

After consent, and depending on the browser, device and Google settings, Google Analytics may process information such as the page URL and title, referrer, date and time, browser and device characteristics, language, approximate geographic region and events such as a page view. A browser request to Google necessarily includes an IP address; Google states that Google Analytics 4 uses it to derive location information and then discards the raw IP address without logging or storing it in Analytics. Numbivo does not configure the Google tag to send calculator input values or calculation results as custom Analytics events.

The purpose is statistical audience and content measurement rather than deciding whether a particular calculator result is correct for an identified person.

Advertising with Google AdSense

Numbivo may use Google AdSense to help finance the website. Where AdSense or another advertising technology is enabled, its operation depends on the configuration actually deployed, the visitor's consent choices where required, and applicable law. Advertising technologies that require consent should not be loaded merely because a visitor opened a calculator or other page.

3. Legal bases

• Article 6(1)(f) GDPR – legitimate interests: operating and securing the website, functional delivery through the CDN, preventing abuse, responding to ordinary enquiries and maintaining minimal technical/application logs. This basis is not used to bypass the analytics consent described below.
• Article 6(1)(b) GDPR – contract or pre-contractual steps: where your message concerns a contract or steps you asked us to take before entering into a contract.
• Article 6(1)(c) GDPR – legal obligation: where processing is necessary to comply with applicable law.
• Article 6(1)(a) GDPR – consent: for Google Analytics and, where enabled and consent is required, advertising technologies.

4. Cookies and browser storage

Numbivo uses browser-side storage required for features you request, including IndexedDB for saved calculator results and short-lived session storage when reopening a saved calculation. The server also sets the necessary first-party session cookie PHPSESSID, which associates requests from the same browser with a temporary PHP server session. The cookie itself is a randomly generated identifier and is not used for analytics or advertising. These technologies are described in the Cookie & Browser Storage Policy.

Google Analytics can set first-party analytics cookies as described in the Cookie & Browser Storage Policy. Analytics is treated as an optional measurement technology and its tag remains blocked until analytics consent is given. The legal basis for this processing is Article 6(1)(a) GDPR together with the applicable rules governing access to browser storage.

The privacy interface stores the visitor's choice locally in the browser together with the policy version and a timestamp so the preference can be remembered. The categories and controls shown in “Privacy settings” reflect the optional technologies actually deployed at that time. Analytics consent can be reviewed or withdrawn through the footer control; withdrawal disables further Analytics collection for the measurement ID and removes Numbivo cookies whose names begin with _ga.

Advertising storage, advertising user data and advertising personalisation remain denied unless the deployed advertising configuration and the visitor's valid consent choice allow the relevant purpose. Where a certified consent platform or renewed consent is required for the advertising configuration in a particular region, that setup should be completed before the corresponding consent-dependent advertising technology is enabled.

5. Google Analytics and Google advertising

Google receives data when a browser communicates with the Google Analytics service used on Numbivo. Google explains this processing in How Google uses information from sites or apps that use its services and in the Google Privacy Policy. Users who do not want Google Analytics used in their browser can also install the Google Analytics opt-out browser add-on.

If Google AdSense is enabled, third-party vendors including Google may place or read cookies in your browser or use other technologies such as local storage, web beacons and IP addresses to collect information as a result of ad serving. Where permitted by your consent choices and applicable law, Google’s use of advertising cookies enables Google and its partners to serve ads based on your visit to Numbivo and/or other sites. You can manage or opt out of personalised advertising in Google My Ad Center. Other advertising vendors, if used, are disclosed through the applicable consent interface and may provide their own privacy and opt-out controls.

Where Google's publisher requirements or applicable law require a particular consent-management setup for the advertising configuration, that setup should be in place before the corresponding consent-dependent advertising is enabled.

6. Recipients and processors

Personal data may be processed by service providers necessary to operate Numbivo, such as the hosting provider, email provider and technical service providers acting on our behalf. jsDelivr and its CDN delivery providers receive technical request data when Bootstrap files are loaded. After analytics consent, Google receives data through Google Analytics as described above. Where advertising is enabled, Google and the advertising vendors disclosed through the applicable consent interface may also receive data according to their roles, settings and the visitor's choices.

Data may also be disclosed where required by law, a competent authority or where necessary to establish, exercise or defend legal claims.

7. International data transfers

Google, jsDelivr/CDN delivery providers and other service providers may process data outside the European Economic Area. Where a restricted transfer occurs, it must rely on an applicable legal transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another mechanism permitted by data-protection law. The exact processing locations and safeguards depend on the provider, service configuration and applicable terms.

8. Retention

• Local saved calculations: until you delete them or clear browser storage.
• Numbivo save-event JSONL logs: up to 180 days.
• Email correspondence: for as long as necessary to answer and close the matter and, where justified, for the period needed to establish, exercise or defend claims or comply with legal obligations.
• Technical hosting/server logs: according to the hosting/security configuration and only for as long as needed for operation, diagnostics, security and applicable legal requirements.
• Local privacy-choice record: until the choice is replaced or withdrawn, the consent version changes, or browser storage is cleared.
• Google Analytics cookies: the default duration described by Google is up to 2 years, although browser controls and service configuration can shorten it.
• Google Analytics user-level and event-level data: according to the retention setting selected in the Analytics property. Aggregated reporting may follow different retention behaviour from user- or event-level data.
• Consent and advertising data, where applicable: according to the consent-management and advertising settings used by the deployed configuration.

9. Your data-protection rights

Depending on the circumstances, you may have the right to access your personal data, rectify it, request erasure or restriction, object to processing based on legitimate interests, receive data in a portable format where applicable, and withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Analytics consent can be withdrawn directly through “Privacy settings” in the Numbivo footer.

You also have the right to lodge a complaint with a supervisory authority. Because the controller is established in Poland, the Polish supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). You may also contact the competent authority available to you under applicable GDPR rules.

To exercise a right, email contact@numbivo.com. We may need information sufficient to verify the request where required.

10. Security and changes to this policy

We use reasonable technical and organisational measures intended to protect the website and data against unauthorised access, alteration, loss or disclosure. No online system can guarantee absolute security.

This policy may be updated when Numbivo adds services, changes providers or when legal/technical requirements change. The effective date at the top of the page identifies the current version.