Privacy Policy

Privacy by design: clear, minimal, and practical.

Quanrel is built to surface conversion blockers without collecting what users type into forms or turning behavioural data into an advertising asset.

Last updated: March 1, 2025
The short version: Quanrel is privacy-first. We collect the minimum data needed to detect friction, do not store what people type into forms, and do not sell behavioural data.

1. Overview

Quanrel ("we", "us", "our") operates quanrel.com and the Quanrel form analytics service. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform, both as a customer (dashboard user) and as an end user of a website tracked by Quanrel.

By using Quanrel, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the service.

2. Information we collect

2.1 Information you provide to us

When you register for a Quanrel account, we collect:

  • Name and email address
  • Password (stored as a bcrypt hash — we never see your plain-text password)
  • Billing information, processed by our payment provider (we do not store card details)
  • Communications you send to us (support tickets, emails)

2.2 Information collected automatically (dashboard users)

When you log into your Quanrel dashboard, we collect standard server log data including your IP address, browser type, and pages visited. This is used solely for security, abuse prevention, and service improvement.

2.3 Information collected about your website's visitors

When you install the Quanrel tracker on your website, it collects the following information about your visitors' interactions:

  • Form interaction events (field focus, field fill, field blur, form submit, form abandon)
  • Timestamp and duration of each interaction
  • Field name and field order within a form
  • Page URL where the form is located
  • Device type (desktop, mobile, or tablet — derived from screen width, not user agent)
  • An anonymous, per-session identifier (not persistent across visits)

We do not collect: names, email addresses, phone numbers, passwords, payment information, or any data that users type into form fields. The tracker records that a field was interacted with — not what was typed.

3. How we use information

We use the information we collect to:

  • Provide, operate, and maintain the Quanrel service
  • Detect and surface conversion blockers on your behalf
  • Send transactional emails (account creation, billing receipts, security alerts)
  • Respond to your support requests
  • Monitor and improve the performance, reliability, and security of our platform
  • Comply with legal obligations

We do not use your data or your visitors' data for advertising, profiling, or any purpose other than operating the Quanrel service for you.

4. Tracking & analytics data

The behavioural data collected by the Quanrel tracker on your website belongs to you, the Quanrel customer. We process it on your behalf (as a data processor under GDPR) to generate insights within your dashboard.

This data is stored in an isolated database partition per customer. It is never shared with other customers, never sold, and never used for any purpose other than providing your Quanrel dashboard.

All tracker data is transmitted over HTTPS using the sendBeacon API, which is non-blocking and does not slow down your visitors' page loads.

5. Cookies

Quanrel uses cookies in the following limited ways:

  • Session cookies: Used to keep you logged into your dashboard. These are HTTP-only, SameSite=Lax, and expire when you close your browser.
  • CSRF token: A per-session token attached to all forms to prevent cross-site request forgery attacks.

The Quanrel tracker script installed on your website does not set cookies on your visitors' browsers. It uses a transient, in-memory session identifier that does not persist between visits.

6. Data sharing

We do not sell, trade, or otherwise transfer your information to third parties, except in the following limited circumstances:

  • Service providers: We use a small number of third-party services to operate Quanrel (hosting, payment processing, transactional email). These providers are contractually bound to use your data only to provide services to us.
  • Legal requirements: We may disclose information if required by law or in response to a valid legal process.
  • Business transfers: If Quanrel is acquired or merges with another company, your data may be transferred as part of that transaction. We will provide notice and, where legally required, seek your consent.

7. Data retention

Dashboard account data is retained for as long as your account is active. If you delete your account, your personal information is removed within 30 days. Anonymised, aggregated statistics may be retained in a form that cannot be linked to you.

Visitor tracking data collected on your website is retained according to your plan (7 days for Starter, 90 days for Pro, unlimited for Business). You may request early deletion at any time.

8. Your rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you
  • Correction: Request that we correct inaccurate data
  • Deletion: Request that we delete your data
  • Portability: Request your data in a machine-readable format
  • Objection: Object to processing in certain circumstances

To exercise any of these rights, email us at privacy@quanrel.com. We will respond within 30 days.

9. Security

We implement a range of technical and organisational security measures including: HTTPS-only data transmission, bcrypt password hashing (cost factor 12), session token rotation on login, rate-limited login attempts, and restricted access controls for all production systems.

While we take security seriously, no method of transmission over the Internet is 100% secure. We encourage you to use a strong, unique password for your Quanrel account.

10. Children's privacy

Quanrel is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by placing a prominent notice on our website. Your continued use of Quanrel after changes become effective constitutes your acceptance of the revised policy.

12. Contact us

If you have questions or concerns about this Privacy Policy, please contact us:

More context

Read the policy, then see how the product applies it in practice.

Privacy-first is not a feature layer. It is the operating principle behind the product.