Privacy Notice — Analytics
Effective: 11 June 2026. How we handle analytics data with privacy-first safeguards, designed to comply with the GDPR.
Data Controller
The data controller for the analytics processing described here is Joshua Sievert (Utably), Landsbergerstraße 46, 04157 Leipzig, Germany. You can contact us at support@utably.com or via the details on our Imprint page.
Overview
This notice explains how Utably processes analytics data in a privacy-protective way. Analytics help us understand feature adoption and performance so we can improve the product. Participation is optional and based on your consent; you can enable or disable analytics anytime in Settings → User Data & Exports → Analytical data.
Scope
This page covers analytics telemetry generated from your use of the app. Other processing (authentication, billing, stored user content, customer support, security logs) is covered by our main Privacy Policy. This page focuses only on analytics-specific processing and safeguards.
What We Collect (Pseudonymous & Aggregated)
We collect pseudonymous metrics such as feature usage counts, error rates, response times, app version, high-level interaction flows, and coarse device/browser characteristics. We avoid storing direct identifiers (e.g., name, email) or document contents in analytics tables. Data are further aggregated for reporting.
Purposes of Processing
We process analytics to: (1) improve product quality and usability; (2) detect and remediate reliability/performance issues; (3) guide roadmap decisions based on aggregated adoption and effectiveness; and (4) maintain basic security and abuse-detection signals without storing personal content.
Sources of Data
Analytics originate from your in-app interactions and our services’ operational telemetry. Client-side events are minimized to what is necessary for the stated purposes and are pseudonymized before storage.
How We De-identify
Before analytics are stored, we apply hashing/tokenization and redaction to remove or obfuscate identifiers and textual content. These measures aim to prevent re-identification. Because absolute anonymization is hard to guarantee, we treat analytics as personal data and apply GDPR safeguards.
Legal Basis and Your Rights
Legal basis: consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time in Settings; withdrawal does not affect the lawfulness of processing before withdrawal. Under the GDPR, you can request access, rectification, erasure, restriction, portability, and object where applicable. You also have the right to lodge a complaint with a supervisory authority — including the authority competent for us (the Saxon Data Protection Commissioner) or the supervisory authority in your EEA country of residence.
Recipients (Processors)
We use cloud infrastructure and observability providers acting as processors under data processing agreements and security controls. Core platform services run on AWS (e.g., Cognito, Lambda, DynamoDB, S3, CloudFront). If we add any separate analytics vendor, it will be listed in our Cookie Register.
International Transfers
Where analytics data are transferred outside the EU/EEA, we implement appropriate safeguards such as the EU Standard Contractual Clauses, plus technical and organizational measures aligned to the data’s pseudonymous nature.
Retention and Storage
We retain raw analytics only as long as needed for the purposes above, then further aggregate or delete. Our standard retention window for identifiable/pseudonymous analytics is 13 months, unless otherwise stated in our Cookie Register.
Consent Management & Opt-out
On utably.com (the logged-out marketing site), analytics consent is controlled exclusively via the cookie banner and the "Cookie Settings" link in the footer. Within the app (app.utably.com), you can additionally change your choice anytime in Settings → User Data & Exports → Analytical data. If analytics rely on cookies or similar technologies, we obtain consent via our cookie banner and provide a "Cookie Settings" control to withdraw with the same ease as giving consent.
Automated Decision-Making
We do not use analytics to make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects for you.
Children's Data
Our services are not directed to children. We do not knowingly collect personal data from children for analytics. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.
Changes to this Notice
We may update this notice to reflect product or regulatory changes. We will post updates here with a revised effective date and, where appropriate, provide prominent notice of significant changes.
Contact
Questions about this notice or your analytics choices? Contact us at support@utably.com or via the Contact page.