Privacy Policy

1. Who is the controller

The data controller for NoAdsFrog (the “Site”) is the operator of NoAdsFrog, based in the Netherlands. The operator can be reached at youtubepremiumornot@gmail.com. NoAdsFrog is a non-commercial hobby project; there is no registered business behind it.

2. What we collect and why

We try to collect the minimum needed to run the Site. The following processing activities take place, each with its legal basis under Article 6 of the GDPR.

• Calculator submissions. When you complete the questionnaire and a result is generated, the answers and the computed result are stored in our database. They power both the site-wide statistics and the activity feed on the landing page. No name, email, full IP address, or cookie identifier is stored with this row. Two further pieces (country code and auto-generated nickname) are also captured at submission time and described in the next two bullets. Legal basis: legitimate interest (Art. 6(1)(f)) in understanding aggregate usage and displaying activity.
• Country at submission time.A two-letter ISO country code (e.g. NL, BR, US) is derived from the IP address of your submission request via the hosting provider’s geo header. The full IP address is never stored; only the country code is retained. Legal basis: legitimate interest (Art. 6(1)(f)) in displaying aggregate activity on the landing page.
• Auto-generated nickname at submission time. A random animal-themed nickname (e.g. “Hoppy Pondsworth”) is assigned to each submission so the public activity feed can refer to it without revealing identity. The name has no connection to you and is purely cosmetic.
• Leaderboard entries.If you choose to post your result to the leaderboard, the display name and emoji you submit are stored alongside your computed annual hours saved. Legal basis: consent (Art. 6(1)(a)), given by clicking the “Post to leaderboard” action.
• Feedback.If you submit feedback, the free-text body is stored. Legal basis: consent (Art. 6(1)(a)), given by clicking the “Send feedback” action.
• Google Analytics 4. The Site loads Google Analytics on every page view. GA4 records aggregated visit data (referrer, country, device type, pages viewed, approximate session duration). IP addresses are anonymised by GA4 before logging. Legal basis: legitimate interest (Art. 6(1)(f)) in understanding traffic.
• Microsoft Clarity. If the Clarity project ID is configured, Clarity records session interactions (clicks, scrolls, mouse movement) and may capture heatmaps. Sensitive form fields are masked by Clarity by default. Legal basis: legitimate interest (Art. 6(1)(f)) in understanding usability.
• Vercel Analytics.The Site loads Vercel’s first-party Web Analytics, which records aggregated page views, country, and device type. Vercel Analytics does not set cookies and does not use cross-site identifiers. Legal basis: legitimate interest (Art. 6(1)(f)) in understanding traffic.
• Vercel Speed Insights.The Site also loads Vercel’s Speed Insights, which collects Core Web Vitals measurements (LCP, CLS, INP, TTFB) per page view. Speed Insights does not set cookies and does not use cross-site identifiers. Legal basis: legitimate interest (Art. 6(1)(f)) in monitoring real-user performance.
• First-party cookies. Two functional cookies are set after you post to the leaderboard or send feedback: ytp.leaderboard.posted and ytp.feedback.posted. Both are HttpOnly, contain only today’s date, expire at local midnight, and are used solely to enforce a once-per-day rate limit. They do not track you across sessions or sites. Legal basis: legitimate interest (Art. 6(1)(f)) in preventing abuse.

3. Who processes the data

We rely on the following processors and sub-processors:

• Vercel Inc. hosts the Site, runs its serverless functions, and provides the Web Analytics and Speed Insights described above. Function execution happens in EU regions where available.
• Supabase Inc. hosts our Postgres database (region: Central EU, Frankfurt).
• Google Ireland Ltd. operates Google Analytics 4.
• Microsoft Ireland Operations Ltd. operates Microsoft Clarity.

4. International transfers

Google and Microsoft may transfer analytics data to the United States or other jurisdictions outside the EEA. Such transfers are covered by the EU Standard Contractual Clauses (SCCs) published by the European Commission and, where applicable, the EU-US Data Privacy Framework.

5. How long we keep data

Calculator submissions, leaderboard entries, and feedback are kept for as long as the Site is in operation. They are not deleted on a fixed schedule, but we will delete on request (see your rights below). Analytics data is retained per the standard retention configured in GA4 (currently 14 months) and Clarity (currently 30 days), after which it is aggregated or deleted by the processor.

6. Your rights under the GDPR

You have the right to:

• request access to the data we hold about you (Art. 15);
• request correction of inaccurate data (Art. 16);
• request erasure of your data (Art. 17);
• request restriction of processing (Art. 18);
• request portability of your data (Art. 20);
• object to processing based on legitimate interest (Art. 21), including the analytics and Clarity processing described above.

To exercise any of these rights, email youtubepremiumornot@gmail.com. Because leaderboard and feedback entries are stored without an identifier tied to you, please include enough detail (display name, approximate date) for us to find the record.

7. Right to complain

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Dutch supervisory authority, Autoriteit Persoonsgegevens, via autoriteitpersoonsgegevens.nl.

8. Changes to this policy

We may update this policy at any time by publishing a new version on this page. The “Last updated” date at the top reflects the current version. Material changes will be highlighted on the landing page for a reasonable period after publication.