Privacy policy

Who is responsible

• For visitors to appetite.link and people with a dashboard account, Appetite Creative is responsible for the data (the controller).
• For people who scan a code or use a campaign, the brand running that campaign is the controller. Appetite Creative handles the data on the brand's behalf, under a data processing agreement. Questions about a campaign are best sent to the brand; we help them answer.

This website

• The public pages set no cookies, have no forms and load no third-party trackers.
• We count visits with Link's own analytics, without cookies. A visitor is recognised for one day only, by a hash that mixes a secret that changes daily with the browser and network address. The address itself is never stored.
• If you contact us through "Talk to us", we use what you send to reply.
• Booking a call through "Talk to us" happens on Calendly, in a window that loads from Calendly only when you open it. Calendly handles your booking, and any cookies it sets, under its privacy notice.

Dashboard accounts

• Accounts are by invitation only. We keep your name, work email and role.
• You sign in with a one-time code sent by email, or with a passkey. For a passkey we keep only its public key and technical details; fingerprints and face data never leave your device.
• We record each sign-in (when, how, and from which browser and device) so you can spot access you don't recognise, and we keep an audit log of changes made in the dashboard.
• A session cookie keeps you signed in until you close your browser, or for at most 12 hours. If you choose to trust a device, a cookie remembers it for 30 days; you can revoke it at any time.

Campaigns and the people who scan

• When someone scans a code, we record the scan without storing their network address: we look up an approximate city, then discard the address.
• Campaigns may record what people do, such as pages viewed or a game played, to measure the campaign. These measurements never include personal details.
• Contacts, such as an email address for a newsletter, are collected only with consent, and we record that consent with the version of the policy it was given under.
• Contacts, consents and uploads are kept in the region the campaign is set to: the EU (Germany) or Saudi Arabia. They are deleted when the person asks, or at the end of the retention period the brand sets.
• AI assistants see what a person types into them, never the contact details collected elsewhere in the campaign. A brand can require that AI processing stays in the EU.

Where data is kept, and who helps us

• Servers and backups: Hetzner, in Germany. Personal data for campaigns set to Saudi Arabia stays on servers there.
• Network and security: Cloudflare, which carries traffic to and from Link.
• Email: our email delivery provider sends sign-in codes and invitations.
• AI: when a campaign uses an AI assistant, the model provider set up for it, on EU-only routes when the campaign requires it.

Your rights

You can ask to see, correct or delete your personal data, to restrict or object to how it is used, and to receive it in a portable form. You can also complain to your data protection authority. For data collected by a campaign, contact the brand that runs it; we help them respond. For anything else, talk to us.

Changes

When how we handle data changes, we update this page and the date above.