Legal
Privacy Policy (GDPR)
Last Updated: August 18, 2026
1. Data Controller
Koefy OÜ, Tallinn, Estonia
Contact: [email protected]
2. Data We Collect
- Account Information: Email address and username.
- Transaction Data: Processed by Stripe. We do not store your full credit card number. Stripe provides us with the last four digits, expiry date, and transaction confirmation.
- Usage Logs: IP addresses and interaction data used for security.
- Optional Product Analytics: With your consent, feature interactions and technical error information used to improve Koefy. We do not send passwords, payment details, comments, or feedback text to analytics.
3. Legal Basis for Processing
- Contractual Necessity: To provide your Pro subscription.
- Legitimate Interest: To protect our intellectual property from scraping and to ensure platform security.
- Legal Obligation: To comply with Estonian tax laws regarding financial records.
4. Data Retention
- Financial Records: Retained for 7 years as required by Estonian accounting law.
- Account Data: Retained for the duration of your active account. Inactive accounts may be deleted after 2 years of non-use.
5. Third-Party Sharing
We do not sell your personal data. We share data only with:
- Stripe: To process your payments.
- Hosting Providers: Secure cloud servers.
- PostHog: To provide optional product analytics and error tracking when you consent.
6. Your Rights (GDPR)
Since we are based in Estonia, you have the right to:
- Access the data we hold about you.
- Request deletion of your data (right to be forgotten).
- Correct any inaccurate information.
- Withdraw consent for marketing emails at any time.
- Withdraw or grant product analytics consent at any time using the controls below.
7. Responsible Gambling
Koefy is not a gambling site, but we care about our users. If you feel you have a gambling problem, please visit Gambling Therapy.