Last modified 11 Jul 2025

Privacy Policy

Introduction

This Privacy Policy outlines how Bubblet ("we", "us", "our"), as the Data Controller, collects, uses, discloses, and protects your personal information when you interact with our web application. We are committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws.

This policy also details the role of PostHog, Inc. ("PostHog") as our Data Processor for certain analytics and functionality enhancement purposes.

Data Controller and Data Processor

  • Data Controller: Bubblet (bltmtt@gmail.com)

    Responsible for determining the purposes and means of processing your personal data.

  • Data Processors:

    Processes personal data on behalf of Bubblet for specific purposes (analytics, backend), based on our instructions.

Information We Collect

We collect information to provide and improve our service. The legal basis for processing depends on the specific context:

Information you provide directly

Google Connection

When you connect using Google, we may collect:

  • Your public Google profile information (e.g., username, profile picture).
  • Any data you explicitly choose to share through the connection.

Legal Basis:

  • Necessary for the performance of a contract (to provide the service you requested by logging in) and, for optional data, your explicit consent.

User-Provided Data

Information you enter into your Bubblet profile in the dashboard. This includes, but is not limited to: projects, personal info (name, contacts, description, links), offers, news, and posts.

Legal Basis:

  • Necessary for the performance of a contract (to provide the core features of the service).

Information collected automatically

PostHog Analytics & Enhancement

We use PostHog to collect data about how you interact with our application. This processing relies on different legal bases depending on the cookie/data category:

  • Device Information: (e.g., device type, operating system, browser type)
  • Usage Data: (e.g., features used, pages visited, interaction patterns, session duration, anonymous click tracking via $autocapture, anonymous session recordings)

Legal Basis:

  • For strictly necessary technical data required for PostHog to function minimally: Legitimate Interest.
  • For Performance & Analytics cookies/data: Your explicit Consent obtained via our cookie banner.
  • For Functional Enhancement & Personalization cookies/data (e.g., session recordings): Your explicit Consent obtained via our cookie banner.

How We Use Your Information

We use your information based on the legal bases outlined above for the following purposes:

  • To provide and improve our application: delivering features, fixing bugs, enhancing usability.
  • To analyze user behavior and trends: understanding how the application is used via analytics to improve features and performance.
  • To personalize your experience: using data (potentially including insights from PostHog features like A/B testing, if implemented) to tailor the service.
  • To comply with legal requirements: fulfilling legal or regulatory duties.

Your Responsibility for Public Data in Widgets

You control the data you enter into your dashboard (e.g., personal info, projects, links, offers). This data is intended for public display through the embeddable widget.

It is your sole responsibility to ensure you do not enter sensitive data you do not wish to be publicly accessible. Any information you provide to be shown in the widget will be visible to all visitors of any website where that widget is embedded.

Public Content and Search Engine Indexing

When you register for Bubblet, you explicitly agree that:

  • Your user-provided data may be displayed on a dedicated public page, accessible via a unique, shareable link.
  • This page does not contain sensitive personal information beyond what you choose to include.
  • This public page and its content may be indexed by search engines (e.g., Google).
  • You retain control and can make your public page private or delete it entirely.
  • You have the responsibility to review and ensure no sensitive information is included.

Legal Basis: Your explicit Consent given during registration/configuration of public pages. You can withdraw this consent by changing your page settings.

Sharing Your Information

We only share your information under specific circumstances:

  • Service Providers (Data Processors)
    • Firebase: used for backend services and data storage. See their policy at Firebase Privacy and Security.
    • PostHog, Inc.: used for analytics and application usage insights as described above. They process data based on our instructions.
    • Google: for authentication purposes if you use Google sign-in.
  • Search engines: for indexing public users data, based on your consent.
  • Law Enforcement or Regulatory Authorities: if required by law or to protect rights, property, or safety (Basis: Legal Obligation).
We do not sell your personal information.

Your Data Subject Rights under GDPR

You may have certain rights regarding your personal information, including:

  • The right to access and rectify your personal information
  • The right to object to the processing of your personal information
  • The right to erase your personal information or request removal of public content
  • The ability to make your public page private or delete it entirely

If you wish to exercise any of these rights, please write at

We will respond to your request within one month, as required by GDPR.

Cookies and Similar Technologies

What are cookies?

Cookies are small text files stored on your device. We also use similar technologies like localStorage which might be employed by services like PostHog. These help our website function and provide insights.

Cookies & Technologies We Use

We categorize the cookies and technologies used as follows:

Performance & Analytics

  • Purpose: help us understand how visitors use our website by collecting anonymous data about:
    • Pages visited
    • Time spent on site
    • Navigation paths
    • Anonymous clicks tracking
    • Device/Browser information
    • Geographic location (approximate)
    • Duration: up to 12 months
  • Provider: PostHog, Inc.
  • Legal Basis: your explicit Consent.

Functional Enhancement & Personalization

  • Purpose: Allow us to improve usability and potentially tailor your experience using PostHog features like:
    • Anonymous session recordings: to understand user interaction patterns and identify usability issues.
    • A/B Testing/Feature Flags: to test new features or personalize content.
  • Provider: PostHog, Inc.
  • Legal Basis: your explicit Consent.

Your Choices Regarding Cookies

  • You can accept or decline cookies/technologies via our cookie banner when you first visit, or change your preferences anytime through the link in the footline of the website.
  • You can also control cookies through your browser settings (blocking, deleting), though this may affect site functionality.

Data Security

We implement technical and organizational security measures reasonably designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. This includes using secure services like Firebase for data storage and PostHog for analytics processing

However, no method of transmission over the internet or electronic storage is 100% secure.

Data processed by PostHog on our behalf is stored within the European Economic Area (EEA).

Data stored via Firebase may also involve transfers, refer to the Firebase Privacy and Security.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your account activity, and as required for legal, accounting, or reporting requirements.

  • Analytics data collected via PostHog is typically retained according to PostHog's configuration for up to 12 months or until you withdraw consent.
  • Account information and user-provided data are retained until you delete your account or request erasure, subject to legal obligations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our practices, please write at