Privacy Policy

Last updated: 11 October 2026

This Privacy Policy describes how we collect, use, and protect personal data we receive through the Scangrade beta access form on this landing page. Modifications and additions to this Policy may be made by the data controller at any time.

Data controller

The data controller is the entity operating Scangrade. For any privacy-related request, you can reach us at info@scangrade.cards.

Data we collect

When you submit the beta access form, we collect: your email address, the customer type you selected, a free-text description of how you plan to use Scangrade, your language preference, your privacy consent (required), and your marketing consent (optional). To protect the form from abuse we also process your IP address: we use it to count requests per network, and we store only counters identified by a keyed hash of the address (not the address itself), which expire within one day and are then deleted automatically. The form is also protected by Cloudflare Turnstile, an anti-bot check that loads when you start using the form: to tell people from bots, Cloudflare processes your IP address and technical data about your browser and device (such as the TLS fingerprint and the user agent), and we send Cloudflare your IP address together with the verification result it issued to your browser, to have it confirmed. Cloudflare describes this processing in its Turnstile Privacy Addendum (https://www.cloudflare.com/turnstile-privacy-policy/) and in its Privacy Policy (https://www.cloudflare.com/privacypolicy/).

Cookies and browser storage

This site sets a single cookie, sg_lang, and only when you switch language with the language selector: it holds "en" or "it", remembers your choice for one year and is used only to show you the site in that language. If you switch between the light and the dark theme, your choice is saved in your browser’s local storage. Neither is used to track you or shared with third parties, and you can delete both from your browser settings at any time.

Legal basis

We process your data on the basis of (a) your explicit consent for the management of your beta request and our related communications, and (b) your separate, explicit consent for any marketing communications, where applicable. You can withdraw consent at any time by contacting info@scangrade.cards. The anti-abuse processing described above (the request counters based on your IP address and the Cloudflare Turnstile check) takes place when you use the form, before and regardless of your consent: it is based on our legitimate interest in protecting the form and our services from spam and automated abuse.

Purposes of processing

We use your data to: (i) evaluate and respond to your beta access request; (ii) send transactional emails relating to the status of your request (confirmation, approval, rejection); (iii) if you opted in, send marketing communications about Scangrade; (iv) protect the form from spam and automated abuse. We do not sell or rent your data to third parties.

Email tracking

Emails sent through our provider Resend may include open/click tracking, which records when an email is opened and which links are clicked. This information is used to understand engagement and improve communications. You can opt out of marketing emails at any time using the unsubscribe link or by contacting info@scangrade.cards.

Recipients

Your data is processed by the following sub-processors: Firebase (Google Cloud) for database storage and authentication; Resend for email delivery; Vercel for hosting the form and serverless functions; Cloudflare (Turnstile) for the anti-bot check of the form. These providers operate under their respective privacy frameworks and data processing agreements. As stated in its Turnstile Privacy Addendum, Cloudflare acts as a data processor when it tells people from bots on our behalf, and as an independent data controller when it uses the same technical data to improve its bot detection.

Retention

Beta request records are retained for the duration of the beta program plus a reasonable period afterward (up to 24 months) for record-keeping and compliance purposes. You may request deletion of your data at any time, subject to legal retention obligations.

Your rights (GDPR)

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability. You can exercise these rights by contacting info@scangrade.cards. You also have the right to lodge a complaint with your local data protection authority.

International transfers

Some of our sub-processors are located outside the European Economic Area (EEA). Where data is transferred outside the EEA, we rely on Standard Contractual Clauses and/or other approved safeguards.

Changes to this policy

We may update this Privacy Policy from time to time. The most recent version will always be available on this page. Material changes will be communicated where appropriate.

Contact

For any question about this policy or about how your data is processed, please contact us at info@scangrade.cards.