BrowserPod Privacy Policy

1. Introduction

Leaning Technologies values your privacy. This Privacy Policy details important information regarding the use and disclosure of your information collected on the Services. Your use of the Services and any personal information you provide remains subject to this Privacy Policy and Leaning Technologies' Terms of Service.

2. Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "API key" means a key the Customer generates through the BrowserPod dashboard or dashboard API, which Your Website or Application presents to authorise its use of the Services on the Customer's account.
• "Boot" means the process of starting a Pod, in which (a) Your Website or Application loads the BrowserPod runtime into a web browser, (b) the runtime sets up the Pod's environment within that web browser, and (c) the Pod connects to Leaning Technologies' servers and presents an API key to authorise its use of the Services. Each time a Pod is started, including when a previously running Pod is started again, is a separate Boot.
• "Customer" means the person or organisation that registers for an account and uses the Services.
• "Data Protection Laws" means all laws on the processing of personal data that apply to the Services, including the UK GDPR, the Data Protection Act 2018, and the EU GDPR.
• "End-User" means any person who uses a part of Your Website or Application that runs a Pod. For example, where Your Website or Application runs a Pod on only one page, a person is an End-User only while using that page, and a person who never visits that page is not an End-User.
• "Logging Information" means the records Leaning Technologies creates when a Pod is Booted, when a Pod connects or sends requests to a third-party service, and when a Pod's Portal is first accessed from the internet. A record may include (a) the API key used, which identifies the Customer's account, (b) the time or period of the activity, (c) the destination host name, (d) the destination IP address and port, and (e) the host name of the Portal. Logging Information does not include the path, query string, or content of any request a Pod makes or receives.
• "Pod" means an isolated runtime environment, created through the Services by Your Website or Application, that runs inside the web browser of a person using Your Website or Application.
• "Portal" means a publicly accessible URL, generated through the Services for a specific Pod, that routes network traffic from the internet to a service running inside that Pod.
• "Services" means BrowserPod, including the BrowserPod API, the BrowserPod dashboard and dashboard API, and any related support provided by Leaning Technologies.
• "Your Website or Application" means any website or application operated by the Customer into which the Services are integrated, and through which Pods are created and Booted.

3. Information We Receive from You

You may provide certain personally identifiable information to Leaning Technologies when you register for an account, use the Services, or correspond with us. We may receive the following information from you:

• Contact information: Your email and GitHub username.
• Payment information: If you choose to purchase our paid Services, you will need to provide additional information including your email, billing address, credit card information and payment details. These are collected and processed directly by Paddle.com Market Limited ("Paddle"), which sells the paid Services as merchant of record and acts as an independent controller of that information under its own terms and privacy policy. We share your email address and account identifier with Paddle so a purchase can be linked to your account, and receive from Paddle the status of your subscription and purchases.
• Communication information: If you contact us via a contact form, we will also require additional contact information including your email address, name, company name, company details, and the content of your message.
• Support information: If you request technical support from us, we will collect your communication information, as well as the information you share with us on the reasons for your support request.
• Marketing preferences: Where you choose to receive marketing communications from us, we collect your email address and a record of the consent you give. You may give that consent either by subscribing to our newsletter directly or by opting in during the account registration process. Your marketing preferences are stored by our email provider, Plunk.

4. Information We Collect

When you use our Services, we may automatically collect information about your visit and use. This information may include personal information. We may collect the following:

• Website and Service usage: When you use our Services, our servers automatically record certain information that your web browser sends whenever you visit any website. These server logs may include information such as your web request, IP address, browser type, browser language, referring/exit pages and URLs, platform type, number of clicks, domain names, landing pages, pages viewed, the amount of time spent on particular pages, and the date and time of your request.
• Generation of API keys: When you generate a BrowserPod API key via the BrowserPod dashboard or dashboard API, our servers automatically collect the API key, user ID, and origin IP of the request.
• Third parties: Leaning Technologies may receive personally identifiable information about you from third parties, including information about your transactions or purchase history. If you access the Services through a third-party connection or log-in, that third party may pass certain information about your account to Leaning Technologies. You should always review and adjust your privacy settings on third-party websites and services before linking or connecting them to the Services.

The BrowserPod dashboard uses cookies and Google Analytics, loaded through Google Tag Manager, to understand how the dashboard is used. Google Analytics runs only if you accept cookies in the cookie banner. Your choice also applies to our website, and you can change it at any time using Cookie settings in the dashboard or in the website footer. When it runs, Google Analytics receives information about your use of the dashboard, including your user ID. Separately from the cookie banner, we send Google Analytics records of account events, such as Boots and the generation of API keys, identified by your user ID, on the basis of our legitimate interest in understanding how the Services are used. The dashboard also uses Plausible, a privacy-friendly analytics tool that we host ourselves, which counts page views and events without cookies and without identifying you. No cookies or analytics run inside Pods, and no information about End-Users is sent to these tools. Our website, including its cookies and forms, is covered by our Privacy Policy.

4a. Logging Information

We also collect some non-personally-identifiable information from the End-Users of Your Website or Application. When a Pod is Booted, when a Pod connects or sends requests to a third-party service, and when a Pod's Portal is first accessed from the internet, we may collect the following Logging Information:

• The API key used, which identifies the Customer's account.
• The time or period of the activity.
• The destination host name.
• The destination IP address and port.
• The host name of the Portal.

We do not collect the path, query string, or content of the requests a Pod makes or receives.

5. How We Use Your Information

We may use your information for the following purposes:

• Providing the Services: We may use your personal information to provide and personalise the Services, process payments, provide customer service, maintain or service accounts, verify Customer information, create and maintain business records, verify eligibility, and undertake or provide similar services.
• Contacting users: We do not use your email address or other personally identifiable information to send commercial or marketing messages without your explicit consent or unless it is part of a specific feature for which you can opt-in or opt-out. We may, however, use your email address without further consent for non-marketing or administrative purposes (such as notifying you of major changes to the Services or for customer service). Where you have consented to receive marketing communications, whether by subscribing to our newsletter or by opting in during account registration, we will use your email address to send you newsletters, product updates, and other marketing communications relating to BrowserPod. Those messages are delivered on our behalf by our third-party email provider, Plunk.
• Improving Services: We use both your personally identifiable information and non-personally-identifiable information to improve the quality and design of the Services and to create new features, promotions, functionality, and services.
• Administrative and legal purposes: We may use your personal information to address administrative or legal issues pertaining to Leaning Technologies, including but not limited to intellectual property infringements, delinquent use, defamation, or privacy rights.
• Security and abuse prevention: We may use Logging Information to keep the Services secure and available, to investigate suspected misuse of the Services, and to respond to abuse reports and lawful requests concerning traffic generated through the Services.

6. When We Disclose Information

We may disclose information to third parties in the following circumstances:

• Affiliates: We provide personally identifiable and non-personally-identifiable information to our subsidiaries, affiliated companies, and branch offices to which it is reasonably necessary or desirable for us to disclose such information to provide the Services.
• Providing Services: We provide information to other businesses or persons for the purpose of processing such information on our behalf. This includes our third-party email provider, Plunk, which holds a contact record for every account holder: your email address, name, GitHub username, sign-up date, subscription status, token balance, number of API keys, and marketing preferences. The record is updated when your account or billing changes. Plunk uses it to manage our communications with you and, where you have consented, to deliver newsletter, product update, and other marketing email on our behalf.
• Payments: When you purchase paid Services, we share your email address and account identifier with Paddle, which handles the purchase as an independent controller under its own terms and privacy policy, as described in section 3.
• Legal requests and compliance: We may release personally identifiable information if required to do so by law, or in the good-faith belief that such action is necessary to comply with applicable UK laws or respond to a court order, summons, or search warrant. This may include Logging Information concerning traffic generated through the Services, and the account it relates to.
• In the event of merger, sale, or bankruptcy: If Leaning Technologies is acquired by or merged with a third-party entity, we reserve the right to transfer or assign the information we have collected from our users as part of such merger, acquisition, sale, or other change of control.

Except as described in this Privacy Policy, we do not sell or share your personally identifiable information or non-personally-identifiable information with other, third-party companies.

7. Your Rights and Choices

You have the following rights and choices in regards to your personal information:

• Access: You have the right to request access to and obtain a copy of your personal information that we have collected or obtained.
• Deletion: You have the right to delete your personal information that we have collected or obtained, by contacting us at [email protected].
• Objection: You may decline to submit personally identifiable information through the Services, though this may prevent us from providing certain services to you.
• Correction: You may update or correct your personal profile information by visiting your account profile page or contacting us at [email protected].
• Marketing preferences: Where you have consented to receive marketing communications from us, you may withdraw that consent at any time. If you hold a BrowserPod account, you can review and update your choices in the marketing preferences section of your account when logged in. If you do not hold an account, you can unsubscribe using the link included in every marketing email we send you. Withdrawing marketing consent does not affect service, security, legal, or other administrative communications relating to your account or the Services.
• Withdrawing consent: You have the right to withdraw your consent where we are relying on your consent to process your personal information, though this may prevent us from providing certain services to you.

8. Data Location and Hosting

Your information is stored on servers in the European Union. If you access the Services from any other region of the world with laws or other requirements governing personal data collection, use, or disclosure that differ from applicable laws in the European Union, then through your continued use of the Services, you are transferring your data to the European Union, and you expressly consent to have your data transferred to and processed in the European Union.

Our Services are hosted on a global content delivery network and a global cloud infrastructure, provided by our subprocessors listed below. The exception is Google Analytics, whose data may be processed outside the United Kingdom and the European Economic Area.

9. Data Processing and Controller/Processor Relationship

In connection with the provision of the Services, the Customer is the party that determines the purposes and means for which personal data is processed (the "Data Controller"), whereas Leaning Technologies processes personal data in accordance with the Data Controller's instructions and on behalf of the Data Controller (as a "Data Processor").

As the Data Processor, Leaning Technologies agrees to process Customer data only (i) on the Customer's behalf for the purpose of providing and supporting the Services; and (ii) in compliance with the written instructions received from the Customer and applicable Data Protection Laws.

Subprocessors and Data Location

Leaning Technologies delegates certain processing activities to subprocessors to help satisfy its obligations. Leaning Technologies engages the following entities as subprocessors:

• Cloudflare, Ltd.
  • Content delivery network provider and cloud infrastructure provider (Cloudflare CDN, Cloudflare Workers, and Cloudflare Durable Objects). Processing is performed at the data centre closest to the End-User.
  • Data storage (Cloudflare D1). Data is stored in data centres in the European Union.
• Google LLC
  • Analytics and tag management provider (Google Analytics and Google Tag Manager). Processes information about the use of the BrowserPod dashboard and account events, identified by user ID. Data may be processed outside the United Kingdom and the European Economic Area.
• Plunk
  • Email delivery provider. Holds a contact record for every account holder, with the details listed in section 6, and the marketing preferences of newsletter subscribers, in order to manage our communications and send newsletter, product update, and other marketing email on our behalf. Data is stored in the European Union and European Economic Area.

10. Data Security

Leaning Technologies uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your personal information. However, we cannot ensure or warrant the security of any information you transmit to us, and you do so at your own risk.

11. Changes to This Privacy Policy

This Privacy Policy may be revised periodically and this will be reflected by the "last updated" date at the end of this Privacy Policy. Your continued use of the Services constitutes your agreement to this Privacy Policy and any future revisions.

12. Data Retention and Deletion

Leaning Technologies will retain Customer data during the term of the agreement, unless otherwise required by law.

Deletion Upon Termination

If you choose to terminate the use of the Services or your account, you may send a written request to Leaning Technologies requesting the deletion of all data, content, or other material that you submitted, published, transmitted, or displayed through the Services. Upon termination, Leaning Technologies will direct its subprocessors to delete the Customer data within thirty (30) days, unless prohibited by law.

Logging Information

Logging Information will be retained for twelve (12) months, after which it will be deleted, except where retention is required under applicable laws. In such cases, the data will be isolated and protected from any further processing except as required by law. An API key that has been deleted or has expired is retained for as long as the Logging Information that refers to it.

Analytics and Email Records

Google Analytics keeps data about your use of the dashboard, and the account events we send it, for fourteen (14) months. Your contact record with Plunk, including your marketing preferences, is kept for as long as your account record, and is deleted with it.

Anonymized Data

Leaning Technologies may continue to process information derived from Customer data that has been de-identified, anonymized, and/or aggregated such that the data is no longer considered personal data under applicable Data Protection Laws, for the purpose of improving Leaning Technologies' systems and services.

13. How to Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us at [email protected]. For other enquiries about the Services, please contact [email protected].

Please allow a reasonable time for us to respond to your enquiry.

Last updated: 30 September 2026