Privacy

1. Who is responsible?

The controller for the personal data processed on this site is the owner of Paraat. Their details and email address are on the Contact and company details page.

2. What do we process and why?

• Visitor statistics. Paraat uses its own analytics tool at clickhouse.binary.tools. It is run by the owner of Paraat (binary.tools / Productlabs) and hosted in the EU, on Heroku (Salesforce, EU region). No other party receives this data.
• What we store per page view or event. Time; the page address without anything after the # (so your wizard answers are never sent) and without query parameters, except utm_ campaign tags; the referring website (host and path); the page title; your screen width; your browser language; your approximate location (country, region, city); the name and major version of your browser, your operating system and the device type (desktop, mobile or tablet); engagement (how long you are active on the page and how far you scroll); and page-speed measurements (Core Web Vitals). We do not store the full user-agent string.
• Our own events. wizard_complete (the wizard was finished, with no data about your answers), affiliate_click (which shop link and which list item was clicked; for medical items we only send “medical”, never which item) and theme_change (which theme you choose). We record no click positions: click (heatmap) capture is switched off, and the wizard and the result list are marked private.
• Your IP address. We never store your IP address. It is used only in memory, at the moment of your visit, to (a) work out your approximate location with a database on the analytics server itself (so no external service) and (b) compute a daily visitor id. A short-lived rate-limit counter (about 10 seconds, in memory only) also uses the IP address.
• Daily visitor id. This id is a one-way hash of a random salt that changes every day (UTC), the site, your IP address and your browser user-agent. Old salts are deleted every day. Visits on different days therefore cannot be linked, and we cannot recognise you on a later day.
• Purpose and legal basis. We want to understand how the site is used so we can improve it, and to know which shop links are used (affiliate income). Legal basis: legitimate interest (Art. 6(1)(f) GDPR). The impact on you is small: no cookies, no stored IP address, no tracking across days and no wizard answers.
• Retention. 13 months (395 days). After that the data is deleted.
• Blocking. You can block the statistics with any content blocker. The tool respects Global Privacy Control for its optional consent cookie, but Paraat does not use that cookie.
• Public API for apps and AI assistants. The public /api/checklist receives household details (number of people, pets, days, home type and flood risk) in the web address. The API never accepts medical answers. Paraat’s own software does not log or store these requests, but Heroku’s router logs record the IP address, path and query string of every request, including these.
• Hosting. The site is hosted by Heroku (Salesforce), a US company, in the EU. Heroku hosts both the website and the analytics service and keeps its own router logs, which include your IP address and the requested address (path and any query string). Those logs are outside Paraat’s applications. See Salesforce’s privacy policy for details.

3. Wizard answers

Your wizard answers live only in the link in your browser (after the # sign). They are not sent to Paraat and not stored.

4. Theme preference

We keep the theme you choose in your browser (localStorage, key paraat-theme) so the site remembers it. It stays on your device, contains no personal data and needs no consent.

5. Cookies

Paraat sets no cookies and uses no localStorage or sessionStorage for the statistics. The only thing Paraat keeps in your browser is your theme choice (see above). Shops and partner networks may set cookies after you click a link to their site. That happens on their site and under their own privacy policy (for example bol).

6. Your rights

You can ask for access to, correction of or deletion of your data, and object to processing. Email us at the address on the contact page. You can also complain to the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

7. Changes

We update this text when what we process changes. The date of the last update is at the bottom of this page.

The Dutch text prevails.

Last updated: 2026-11-08