Just Fascinated, registered in the Netherlands, is the data controller for the personal data collected through this website and the Brand OS product. For any questions about your data, contact us at im@justfascinated.com.
We collect the minimum data necessary to deliver the service:
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Account creation, magic link authentication, purchase confirmation | Contract performance |
| Workbook content | Saving your Brand OS progress so it persists between sessions | Contract performance |
| Payment data | Processing your purchase (handled by Stripe) | Contract performance |
| Authentication cookies | Keeping you signed in between page loads | Legitimate interest |
| Aggregate usage data | Cookieless analytics (pageviews, referrer, country, device type) via Umami Cloud | Legitimate interest |
| Error diagnostics | Capturing technical errors so we can fix bugs (may include IP address, browser, and request metadata) via Sentry | Legitimate interest |
We use privacy-first, cookieless analytics (Umami Cloud) to understand aggregate traffic patterns. We do not use tracking pixels, cross-site trackers, or advertising scripts, and we do not profile individual users or make automated decisions about you.
We use only strictly necessary cookies required for the service to function. These are authentication cookies set by Supabase to maintain your login session. They contain no personal information beyond a session token and expire when you sign out or after the session period ends.
We do not use:
Because we only use strictly necessary cookies, we are not required to obtain consent under the Dutch Telecommunicatiewet or the ePrivacy Directive. There is no cookie banner because there is nothing to consent to.
Your data is shared with the following processors, solely to provide the service:
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Authentication and database (stores your email and workbook data) | EU (eu-west-1) |
| Stripe | Payment processing and tax calculation | Ireland / US (with EU data protections) |
| Umami Cloud | Cookieless, privacy-first website analytics | EU |
| Sentry | Error monitoring and diagnostics | EU (Frankfurt) |
| Netlify | Website hosting | Global CDN |
We do not sell, rent, or share your data with any other third parties.
Brand OS includes prompts designed to be used with third-party AI services such as Claude, ChatGPT, or Gemini. When you copy and paste content into those services, your data is processed under their privacy policies, not ours. We do not send your data to these services — you choose what to share with them directly.
Your email address and workbook data are retained for as long as your account is active. If you request deletion of your account and data, we will remove it within 30 days. Payment records are retained by Stripe in accordance with their legal obligations. Analytics data held by Umami is aggregate and non-identifying. Error reports held by Sentry are retained for 30 days and then automatically deleted.
As a data subject under the GDPR, you have the right to:
To exercise any of these rights, email im@justfascinated.com. We will respond within 30 days.
All data is transmitted over HTTPS. Your workbook data is stored in a Supabase database with row-level security — only you can access your own data through authenticated requests. Authentication uses the PKCE flow with magic links, meaning no passwords are stored.
Your authentication and workbook data is stored in the EU (Supabase eu-west-1). Analytics (Umami Cloud) and error monitoring (Sentry) are hosted in the EU. Payment processing through Stripe may involve data transfer to the US under appropriate safeguards including Standard Contractual Clauses. Website hosting through Netlify uses a global CDN but does not store personal data beyond standard server logs.
If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
We may update this policy from time to time. When we make material changes, we will update the “last updated” date at the top of this page. Continued use of Brand OS after changes constitutes acceptance of the updated policy.