Privacy notice

Effective 2026-10-11

This notice explains how feedback and requester account information are handled.

Feedbackers

The individual requester is identified on each feedback page only by an editable public display name. MB “Inista IT” processes Feedback Data on the requester’s behalf. The shared Feedback Privacy Notice gives the purpose, legal basis, intended reader, operational access, subprocessors, rights, objection, complaint, and transfer information.

We store the feedback and follow-up text you choose to submit, an unguessable return-link hash, transaction-control hashes, and aggregate quota counts. We do not ask for or expose a feedbacker identity, account, contact detail, location, read receipt, or visible timestamp. The application does not retain IP addresses, user agents, or referrers from public routes.

The return link is a bearer secret. Anyone who receives it can read and use the conversation. If it is lost, we cannot identify you or recover, locate, or delete the conversation for you.

Cookies

The requester area uses one session cookie, limited to the /app path, to keep a Google-signed-in session and protect forms. The cookie is not sent to public feedback pages. We do not use analytics or advertising cookies.

Deletion and backups

Each message is retained for no more than 12 months after it is received. The requester cannot extend this maximum, and newer messages do not extend older-message retention.

An active return link can delete the conversation from the live database. Provider snapshots may retain prior data for up to 30 days, and restoring an older snapshot may reintroduce an anonymous deletion because this MVP has no independent erasure ledger.

Requester accounts and reports

MB “Inista IT” separately controls requester account administration, OAuth identity, editable public display name, account security, and its own narrowly justified legal and security records. A requester report sends only the opaque conversation reference and the requester-authored description to the dedicated support mailbox. The description may contain sensitive text even though the interface warns against copying feedback.

Your rights and contact

Rights requests use inista.it@gmail.com. A feedbacker without the return secret has no identity-recovery route.