Privacy Policy
This policy explains what personal data MD Store collects on mdstore.app, why, who we share it with and what rights you have. We keep it short because we collect very little.
1. Who we are
The controller of your personal data is Kontone, 66 Al Marsa Street, Dubai Marina, Dubai, United Arab Emirates (P.O. Box 32923) ("MD Store", "we"). Contact: [email protected].
2. What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Waitlist: your email address, the form you used, date and time of sign-up | Contact you about early access to MD Store | Consent, Art. 6(1)(a): you give us your email to join |
| Optional answers after sign-up: your role, the data sources you use, and what you find most painful about market data (free text) | Decide what to build first and whom to invite to early access | Consent, Art. 6(1)(a): you choose whether to answer |
| Traffic source saved with a sign-up: UTM tags, ad platform click (e.g. LinkedIn, Meta), referring website | Understand which channels bring people to the waitlist | Legitimate interest, Art. 6(1)(f) |
| Browser user-agent saved with a sign-up | Spot spam and bots | Legitimate interest, Art. 6(1)(f) |
| Analytics (Google Analytics via Google Tag Manager): pages viewed, approximate location, device and browser, cookie identifier. Only if you accept. | Measure and improve the site | Consent, Art. 6(1)(a) |
We do not ask for names, payment details or other sensitive data, and we ask you not to put confidential information in the free-text answers. We do not sell personal data and we do not make automated decisions about you.
3. Cookies and local storage
Analytics cookies are off by default. They are set only after you choose Accept in the banner. You can change your mind at any time with ; declining removes the Google Analytics cookies from your browser.
| Name | Set by | Purpose | Lifetime | Needs consent |
|---|---|---|---|---|
_ga, _ga_* | Google Analytics | Tell visitors and sessions apart | Up to 2 years | Yes |
consent (local storage) | MD Store | Remember your cookie choice | Until you clear it | No |
theme (local storage) | MD Store | Remember light or dark theme | Until you clear it | No |
attribution (local storage) | MD Store | Remember the traffic source, so a sign-up on a later visit is credited to the channel you came from. Sent to us only if you join the waitlist. | Until you clear it | No |
4. Who we share data with
- Google Ireland Ltd. / Google LLC provides Google Tag Manager and Google Analytics and processes analytics data on our behalf, only if you accept analytics. See Google's Privacy Policy and how Google uses data from sites that use its services.
- Cloudflare, Inc. delivers and protects the website (CDN and security), so it handles visitors' IP addresses and requests. See Cloudflare's Privacy Policy.
- Hexabyte provides the virtual server on which the website runs and the waitlist (email addresses and related sign-up data) is stored.
Google may process data outside the EEA/UK, including in the United States, relying on the EU–US Data Privacy Framework or standard contractual clauses. We do not otherwise share your data, except where the law requires it.
5. How long we keep it
- Waitlist data, including optional answers: until you ask us to delete it, or 24 months after sign-up, whichever comes first.
- Google Analytics data: 14 months, then deleted automatically.
6. Your rights
You can ask us to access, correct, delete or export your data, restrict or object to its processing, and withdraw consent at any time (withdrawing does not affect what we did before). Email [email protected] and we will reply within one month. You also have the right to complain to your local data protection authority.
7. Children
MD Store is a business product and is not directed at anyone under 16. We do not knowingly collect their data.
8. Changes
If we change this policy, we will update the date at the top. For material changes to analytics we will ask for your consent again.