Privacy policy
This document explains what personal data we process in the Seerena service (seerena.com), for what purpose, on what legal basis, who we share it with, how long we keep it and what rights you have. The Polish version is the binding one.
1. Data controller
The data controller is Marcin Beck, a private individual running the Seerena service (the service is free and is not run as a registered business). For anything related to personal data write to contact@seerena.com.
2. What data, why and on what basis
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, email address, password (we store only its cryptographic hash) — or, when you sign in with Google, the name and email address from your Google account | Creating and running your account, signing in, confirming your address, resetting your password | Art. 6(1)(b) — performance of the service contract |
| Addresses of the sites you study, study goals, results, screenshots of the studied sites, point balance and history, feedback on results | Providing the service: running studies and showing results | Art. 6(1)(b) |
Where you came from (e.g. the ref parameter of the link that brought you here) |
Knowing which channels bring users | Art. 6(1)(f) — our legitimate interest |
| IP address, browser, time and address of requests (server logs) | Security, limits on sign-in and sign-up attempts, abuse detection, troubleshooting | Art. 6(1)(f) |
| Visit data for the home page collected by Google Analytics (cookies) | Visit statistics | Art. 6(1)(a) — your consent, which you can withdraw at any time |
| Content of messages you send us | Replying and staying in touch | Art. 6(1)(f) |
Providing data when you sign up is voluntary, but without it you cannot create an account.
Studied sites. We store screenshots and content of the studied sites as they looked at the time of the study. Only study sites you are entitled to test. If a studied site shows personal data (for example after signing in), you decide to bring it into the study — do not study such pages without a legal basis.
3. Language models
Part of the analysis is done by language models in Google Cloud Vertex AI, called in a European Union region. We pass them what the study needs: screenshots and content of the studied site, the study goal and the description of the simulated user profile. We do not pass them your account data (name, email address). Under the Google Cloud terms this data is not used to train models.
Study results are produced automatically, but we make no decisions about you based on them — they describe the studied site, not the user.
4. Who we share data with
- Google Cloud (Google Cloud Poland sp. z o.o. / Google Ireland Ltd.) — servers, database, file storage and language models; data is stored in the europe-west1 region (Belgium).
- Google Workspace (Google Ireland Ltd.) — email at contact@seerena.com.
- Resend (Resend, Inc., USA) — sending system messages: address confirmation, password reset. It receives your email address, name and the message content.
- Google Analytics (Google Ireland Ltd.) — visit statistics, only with your consent.
- Sign in with Google — if you choose it, Google passes us your name and email address.
We do not sell data or share it for marketing purposes.
5. Transfers outside the European Economic Area
Resend and Google may process data in the United States. Such transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
6. How long we keep data
- Account data, studies and results — until the account is deleted. You can delete individual studies and sites in the panel.
- Server logs — 30 days.
- Google Analytics data — 14 months.
- Correspondence — until the matter is closed, and longer only where the law requires it or to defend against claims.
7. Cookies and browser storage
| Name | What for | How long | Type |
|---|---|---|---|
ux_session | Keeping you signed in | 90 days | essential |
browser storage (uxray-lang, uxray-zgoda, uxray-zrodlo,
view settings) | Your language, your statistics choice, where you came from, panel layout | until you clear it | essential |
_ga, _ga_* | Visit statistics (Google Analytics) | up to 2 years | only with consent |
Google Analytics starts only after you click “I agree”. You can withdraw consent at any time:
8. Your rights
You have the right to access your data, to rectify it, to have it erased, to restrict processing, to data portability and to object to processing based on legitimate interest. You can withdraw consent at any time — this does not affect the lawfulness of processing before the withdrawal. To exercise these rights or delete your account, write to contact@seerena.com from the address linked to the account. We will reply within one month.
You also have the right to lodge a complaint with a supervisory authority — in Poland the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the authority in your country of residence.
9. Security
Connections are encrypted (HTTPS), passwords are stored only as cryptographic hashes, and access to data is limited to people who need it to run the service.
10. Changes to this policy
When we change this policy we will update the date at the top of the page. We will tell registered users about significant changes by email.