ConsentLift
Book a demo

Privacy policy

Last updated: 21 May 2026

This policy describes how Gaston Media SAS (18 rue de Copenhague, 67610 La Wantzenau, France) handles data within the ConsentLift service and the consentlift.com site. Our principle: collect the strict minimum, store no personal data from visitors, and host exclusively in Europe.

1. Controller and processor roles

For site and user-account data, Gaston Media SAS acts as data controller. For consent data measured on our customers' sites, Gaston Media SAS acts as a processor, under a data processing agreement (DPA).

2. Data measured on customer sites

The ConsentLift SDK measures consent events (banner display, acceptance, rejection, categories). It collects no personal data:

  • Hashed, non-reversible visitor identifiers
  • No email address, IP address or user agent stored
  • No third-party cookies read, no browser storage accessed outside our namespace
  • Geolocation limited to country / region, with no individual identification

3. Site and account data

On consentlift.com we use privacy-friendly analytics (no session recording). For dashboard accounts, we process strictly necessary information (email, organization, role) via our authentication provider.

4. Hosting and location

The entire infrastructure is hosted in the European Union:

  • Application hosting: Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Allemagne)
  • Edge ingestion and analytics storage: providers operating in the EU region
  • Configuration database: EU region

No data is transferred outside the European Union.

5. Retention

Consent events are kept for up to 24 months, aggregated navigation data for up to 12 months, then automatically deleted. Account data is kept for the duration of the contractual relationship.

6. Your rights

Under the GDPR, you have rights of access, rectification, erasure, objection and portability. Since we store no personal visitor data, these requests mainly concern account data. Contact us at hello@consentlift.com.

7. Changes

This policy may evolve. The last-updated date is shown at the top of the page.