Cookie Policy

1. Introduction

This Cookie Policy explains how Grasply.app ("we", "us", or "our") uses cookies and similar technologies on our website. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union and relevant US state laws such as the California Consumer Privacy Act (CCPA/CPRA).

Our website uses Amplitude analytics, including session replay features that save user interactions to help us improve our services. This policy provides detailed information about our data collection practices, your rights, and how to manage your preferences.

2. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites remember information about your visit, making your experience more efficient. We also use similar technologies like local storage and session storage.

3. Types of Cookies We Use

We categorize cookies as follows:

Essential Cookies: Necessary for basic website functionality. These do not require consent and include cookies for security and session management.
Analytics Cookies: Provided by Amplitude, these help us understand how visitors interact with our website. They store identifiers like deviceId, userId, sessionId, and event data. Cookies include AMP_ followed by API key prefix (e.g., AMP_479cda8100).
Session Replay Cookies: These enable saving user interactions. This helps us identify issues and improve user experience.
Marketing Cookies: Capture campaign data from UTM parameters and advertising IDs (e.g., gclid, fbclid). Cookies include AMP_MKTG_ followed by API key prefix.

Cookies typically expire after 365 days, but session-specific ones may expire sooner.

4. Purposes of Data Collection

We use cookies to:

Analyze website usage and performance
Record session replays for UX improvements
Track marketing campaign effectiveness
Enable core website functionality

5. Consent and Cookie Management

We obtain your consent via our cookie banner before setting non-essential cookies. You can accept, reject, or customize preferences. Consent is freely given, specific, informed, and unambiguous, with equal prominence for accept/reject options.

To withdraw consent, click "Cookie Settings" in the footer. This will remove your consent preference and allow you to choose again. Withdrawal stops future collection but may affect site functionality.

You can also manage cookies through your browser settings.

6. Data Processing and Storage

We use Amplitude's EU data centers to process and store your data within the European Union, ensuring compliance with GDPR requirements. All data processing occurs within EU jurisdiction with appropriate security measures in place.

7. Your Rights

Under GDPR (EU Users, including Netherlands):

Right to access, rectify, erase, or restrict processing of your data
Right to data portability
Right to object or withdraw consent
Right to lodge a complaint with authorities like the Dutch AP

Under CCPA/CPRA (California Users):

Right to know what personal information is collected/sold/shared
Right to delete personal information
Right to opt-out of sale/sharing (we do not "sell" data as defined, but provide opt-out for analytics)
Right to non-discrimination

To exercise rights, contact admin@grasply.app. We respond within required timelines (e.g., 30 days for GDPR, 45 days for CCPA).

Do Not Sell or Share My Personal Information: Click here to opt-out [implement as needed].

8. Data Retention

We retain analytics data for up to 365 days or as necessary for purposes described. Session replays are retained for [specify period, e.g., 30 days] and then deleted.

9. Third-Party Processors

We share data with Amplitude (EU) for analytics and session replay. They act as our processor under appropriate agreements.

10. Changes to This Policy

We may update this policy. Changes will be posted here with the effective date. Last updated: 04-08-2025.

11. Contact Us

For questions: admin@grasply.app or @grasplyapp on X.