Privacy policy

Last updated: April 2026

German version: Datenschutzerklärung

1. Who we are

The service “JustOpinion” (this website and related APIs) is operated by the provider identified in our Imprint. For privacy purposes, that provider is the controller within the meaning of the EU General Data Protection Regulation (“GDPR”) for the processing described here, unless we state otherwise (e.g. purely as processor for customers).

Contact (support and privacy requests): support@justopinion.online

If an EU representative under Art. 27 GDPR becomes legally required for our setup, we will publish the representative details here before relying on that arrangement.

2. Scope

This policy describes how we process personal data when you use our website, register a site, use our comment widget on third-party pages, contact support, or otherwise interact with us. It does not cover third-party websites that embed our widget; those sites have their own policies.

3. Data we process

3.1 Website & infrastructure

We may process:

• Technical connection data (e.g. IP address, timestamp, user agent, requested URL) from server logs and security systems — to operate, secure, and debug the service.
• Cookies or similar technologies where strictly necessary, and — only if you consent where required — analytics (see below).

3.2 Registration & account-related data (site owners)

When you register / manage a commenting “site”, we may process for example:

• Site name, site key, allowed origins, contact email
• Hashes or tokens used for email verification
• Moderation tokens / links and technical identifiers stored with your site
• Marketing / feature opt-ins you choose (e.g. audience lists)

3.3 Comments (visitors to customer sites)

When someone posts via the widget, we may process the text of the comment, optional name or pseudonym, optional email (if provided), page path, parent relationship for threading, and timestamps. This content is displayed on the customer’s website according to their configuration.

3.4 Support & communications

If you email us or use a contact form, we process the data you send (e.g. name, email address, message content) to handle your request.

4. Purposes and legal bases (GDPR Art. 6)

• Contract / pre-contract (Art. 6(1)(b)): providing the commenting service, registrations, and related features you request.
• Legitimate interests (Art. 6(1)(f)): IT security, abuse prevention, improving reliability, limited analytics that do not require consent under ePrivacy rules, and direct support correspondence — balanced against your rights.
• Consent (Art. 6(1)(a)): optional marketing emails, non-essential cookies/analytics, or other uses we expressly ask you to agree to — you may withdraw consent at any time with effect for the future.
• Legal obligation (Art. 6(1)(c)): where we must retain or disclose data to meet applicable law.

5. Hosting, processors, and transfers

We use technical service providers (e.g. hosting, email delivery, error monitoring) who process data on our instructions. If data is processed outside the EU/EEA, we rely on appropriate safeguards under GDPR Chapter V (e.g. EU Standard Contractual Clauses) where required.

Our current processor categories include hosting/infrastructure, transactional email delivery, and operational monitoring. We review processors for data protection commitments and only use them where a valid processing basis and required contractual safeguards are in place.

6. Analytics

If we use privacy-oriented analytics (e.g. cookieless / aggregated usage statistics), we configure it to minimise personal data where feasible. Where consent is required in your jurisdiction for any storage or reading on your device, we will obtain it before activating such tools.

7. Retention

We retain data only as long as needed for the purposes above — for example: comment content while the customer keeps it online; account data while the relationship exists; logs on a rolling basis where reasonable; verification data until the purpose expires — unless a longer retention is required by law.

8. Your rights

Subject to GDPR, you may have the right to:

• Access (Art. 15), rectification (Art. 16), erasure (Art. 17)
• Restriction (Art. 18), data portability (Art. 20)
• Object (Art. 21), and to withdraw consent (Art. 7(3))

You may also lodge a complaint with a supervisory authority, in particular in your habitual residence, place of work, or the location of the alleged infringement.

To exercise your rights, contact support@justopinion.online. For widget comments, the site owner may also be responsible for certain requests regarding publication on their site.

9. Children

Our service is not directed at children. We do not knowingly collect data from children without appropriate consent where such consent is required.

10. Changes

We may update this policy to reflect product or legal changes. Material changes will be indicated by updating the “Last updated” date; where required, we will provide further notice.