Privacy Policy

Data controller

Secyda · legal@secyda.eu · secyda.eu

What data we collect

The browser extension sends anonymous pings to our API containing: domain visited, service category, browser language, time of day, day of week, browser name. These pings DO NOT include: IP address, user ID, browsing history, full URL, geolocation, full user agent, or any data that could identify a person.

The website uses PostHog (self-hosted on our own servers at OVH, Germany) to count page visits. PostHog is only activated if you accept the cookie banner.

How we use the data

To generate the European Digital Sovereignty Report: a quarterly public report with aggregated data on European digital dependency.

To improve the service.

Legal basis

Consent (Art. 6.1.a GDPR) for web analytics. Legitimate interest (Art. 6.1.f GDPR) for anonymous extension pings (not personal data).

Where data is stored

OVH servers in Germany (EU).

Third parties

None. We do not share data with third parties. No advertising. No profiling.

Your rights (GDPR)

Access, rectification, erasure, objection, portability, restriction. Contact: legal@secyda.eu

Data retention

Anonymous pings are retained indefinitely for the report. Web analytics data is retained for 12 months.

Updates

This policy may be updated. Last revision: March 2026.