Privacy Policy

Data Controller:

Cross Border Freelance / Monday Perspective OÜ, Narva mnt 5, 10117 Tallinn, Harjumaa, Estonia

Contact:

privacy@crossborderfreelance.com

GDPR enquiries:

privacy@crossborderfreelance.com

EU Representative:

Not applicable — Cross Border Freelance / Monday Perspective OÜ is established in the EU (Estonia), so GDPR Art. 27 does not apply.

UK Representative:

Not appointed (operator-accepted risk).

1. Who we are and what this policy covers

Cross Border Freelance / Monday Perspective OÜ ("we", "us") operates crossborderfreelance.com (the "Site"). This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and your rights regarding it. It applies to all visitors worldwide, with additional protections for visitors in the EU, EEA, UK, Switzerland, California, and other jurisdictions with privacy laws.

2. Data we collect

2.1 Data you give us directly

• Email address — when you opt in to save a tool scenario by email, subscribe to updates, or include an email in a feedback submission.
• Feedback comments — when you submit feedback through the in-tool feedback widget (sentiment 👍/👎, optional comment text, optional email for reply).
• Tool inputs you choose to share — when you click "email me this scenario", the inputs you entered are included in that single email. Otherwise tool inputs stay in your browser and never reach our servers.

2.2 Data collected automatically (essential)

• Server logs: IP address, user-agent, timestamp, requested URL. Retained 7 days for security and abuse prevention.
• Cookieless analytics: We use Cloudflare Web Analytics, which does NOT use cookies, does NOT store IP addresses, and does NOT track you across sites. We see: which pages were visited, aggregated country (derived from the request), and tool completion / affiliate-click event counts.

2.3 Data collected with your consent (non-essential)

For visitors in the EU, EEA, UK, Switzerland, and other regions where consent is required, the data below is only collected if you give consent through our cookie banner. You can change or withdraw consent at any time using the "Manage cookies" link in our footer.

• Google AdSense: Google sets cookies and may use device identifiers to show ads on our Site, measure ad performance, and limit how often you see the same ad. Google may combine this data with other Google data per Google's own privacy policy. Some Google partners may use this data for personalized advertising.

2.4 Data we do NOT collect

• We do NOT store the actual numbers, dates, countries, addresses, or other inputs you type into our tools on our servers (unless you explicitly use the "email me" feature for that single tool use).
• We do NOT sell or rent personal data to anyone.
• We do NOT use cross-site tracking pixels of our own.
• We do NOT track you across sessions to build advertising profiles ourselves (Google AdSense does this with your consent — see 2.3).

3. Why we collect data and our lawful basis (GDPR Art. 6)

4. Who we share data with (processors and recipients)

• Cloudflare — Site hosting, edge functions, analytics, KV/D1 storage. Data Processing Addendum in place. May process in regions including the US.
• Google LLC — AdSense (only if you consented). Google's privacy: https://policies.google.com/privacy. Some data transferred to the US under Standard Contractual Clauses and the EU-US Data Privacy Framework.
• Resend (resend.com) — sends transactional and newsletter emails when you opt in. DPA in place.
• Affiliate networks — when you click an affiliate link, the destination merchant and the affiliate network (Impact, CJ, ShareASale, Awin, or direct partner) may set their own cookies and process your visit per their own privacy policies.

We do not share personal data with any other third party. We do not sell personal data.

5. International transfers

We are based in Estonia. Some processors (notably Cloudflare and Google) process data in the United States and other countries. For EU/UK/Swiss personal data, we rely on Standard Contractual Clauses (SCCs), the EU-US Data Privacy Framework (where applicable), and adequacy decisions.

6. How long we keep data

7. Your rights

If you are in the EU, EEA, UK, Switzerland, California, or another jurisdiction with privacy laws, you have the following rights:

• Right of access — request a copy of your personal data.
• Right to rectification — correct inaccurate data.
• Right to erasure ("right to be forgotten") — request we delete your personal data. We will delete it within 30 days unless we have a legal obligation to retain it.
• Right to restriction of processing — limit how we process your data.
• Right to data portability — receive your data in a portable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — at any time, including via "Manage cookies" in our footer (no harder to withdraw than to give).
• Right to lodge a complaint — with your local supervisory authority (e.g., your country's Data Protection Authority in the EU, the ICO in the UK).
• California rights (CCPA/CPRA): right to know, right to delete, right to correct, right to opt out of sale or sharing of personal information, right not to be discriminated against for exercising your rights.

To exercise any of these rights, use the form at crossborderfreelance.com/legal/data-rights or email privacy@crossborderfreelance.com. We respond within 30 days.

8. Cookies and similar technologies

See our separate Cookie Policy for a full list of cookies, what they do, who sets them, and how long they last.

You can change your cookie preferences at any time using the "Manage cookies" link in our footer.

9. Children

The Site is not directed to children under 16. We do not knowingly collect personal data from children.

10. Changes to this policy

We post updates with a new "Last updated" date. Material changes are announced to email subscribers.

11. Contact

• General questions: info@crossborderfreelance.com
• Privacy / GDPR / CCPA questions: privacy@crossborderfreelance.com
• Data Protection Officer: none appointed — not required under GDPR Art. 37(1)