Skip to content
AttacharaAttachara

Privacy Policy

Last updated: 8 October 2026

1. Who We Are

Attachara ("we," "us," "our") operates the website attachara.com. This privacy policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR) and applicable Romanian data protection law. Our data controller is Advert In 2007 SRL, Str. Mihai Eminescu 42, Bucharest, Romania, Romania.

2. What Data We Collect

Email address: When you complete the quiz or create an account. Used for authentication, sending quiz results, and protocol access.

Quiz responses: While you take the quiz, your answers stay in your browser. We receive progress events (such as quiz started or completed) that do not include your answers. When you submit your email address to see your results, we store your answers, scores and result with your email address, to show you your results and email them to you.

Purchase information: Payment processing is handled by Stripe, Inc. We receive order confirmations and store your email, purchase tier, and billing cycle for the purpose of granting access. We never see or store your payment card details. Stripe may collect additional data as described in their privacy policy at stripe.com/privacy.

Usage data: We use aggregate analytics to understand site use. Advertising measurement can also involve identifiable data, as described in the tracking section below.

IP address and technical data: Our servers process IP addresses and browser information for security and abuse prevention. When server-side advertising measurement is enabled, this information can also be sent to Meta and TikTok as described below.

3. Legal Basis for Processing

We process your data under the following legal bases: (a) Contract performance — to deliver the protocol you purchased and provide access to your account; (b) Legitimate interest — to improve our service, prevent fraud, and measure aggregate usage; (c) Consent — for marketing emails and advertising tracking cookies (where required).

4. How We Use Your Data

  • To deliver your quiz results and protocol content
  • To send transactional emails (access links, purchase confirmations, invoices)
  • To send marketing emails (only with your consent — you can unsubscribe anytime)
  • To measure advertising effectiveness and improve our campaigns
  • To generate invoices as required by Romanian tax law (SmartBill)

5. Tracking Technologies & Third-Party Services

Plausible Analytics — A privacy-first, cookieless analytics tool. Plausible does not use cookies, does not collect personal data, does not track users across sites, and is fully GDPR-compliant by design. No consent is required for Plausible. Learn more at plausible.io/privacy.

Meta Pixel (Facebook/Instagram) - The Meta Pixel is used for advertising conversion tracking and audience building. Our server-side Conversions API sends events only when the saved advertising choice is Accept All, or, for purchases, when that choice was recorded at checkout. Depending on the event, Meta receives a SHA-256 hash of your email address, IP address, browser user agent, advertising cookie identifiers (_fbp and _fbc) when present, event type, time and ID, a page URL and content labels. Purchase events also include amount, currency, order ID and plan type. Hashed email is a matching identifier, not anonymous data. Our server-side quiz-completion events do not include your individual answers or calculated profile. Meta's data policy: facebook.com/policy.

TikTok Pixel & Events API - The TikTok Pixel is used for advertising conversion tracking. Our server-side Events API uses the same saved advertising choice described for Meta. Depending on the event, TikTok receives a SHA-256 hash of your email address, IP address, browser user agent, event type and time, a page URL and content labels. Purchase events also include amount, currency and an order identifier. These identifiers can be matched to a TikTok account; they are not anonymous data. Our server-side quiz-completion events do not include your individual answers or calculated profile. TikTok's privacy policy: tiktok.com/legal/privacy-policy.

Google Ads Conversion Tag (gtag.js) — Used to measure conversions from our Google Ads campaigns (tag ID: AW-1015732827). Activated with your consent. Google's privacy policy: policies.google.com/privacy.

6. Data Sharing

We share data only with the following third parties, to the extent necessary:

  • Brevo (Sendinblue) — Email delivery service.
  • Stripe, Inc. — Payment processing.
  • SmartBill — Romanian invoicing software.
  • Meta Platforms, Inc. — Advertising analytics (with consent).
  • TikTok Inc. — Advertising analytics (with consent).
  • Google LLC — Advertising analytics (with consent).
  • Plausible Analytics — Cookieless, anonymized traffic analytics (no personal data shared).

We never sell your personal data to any third party.

7. Your Rights (GDPR)

You have the right to: access your data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent at any time. Contact us at [email protected] to exercise these rights. You also have the right to lodge a complaint with Romania's data protection authority (ANSPDCP) at dataprotection.ro.

8. Cookies & Consent

We use the following cookies:

  • Essential (always active): attachara_session (login session, 30 days) and attachara_consent (consent preferences, 1 year). Strictly necessary — cannot be disabled.
  • Cookieless analytics: Plausible Analytics uses no cookies and collects no personal data. No consent required.
  • Advertising tracking (consent required): Meta Pixel (up to 180 days), TikTok Pixel (up to 13 months), and Google Ads tag (up to 90 days). Browser tags are separate from the server-side controls described in section 5. Our server-side Meta and TikTok events use the saved advertising choice described there.

You can clear this site's cookies and choose Essential Only when the banner appears. This stops later browser requests from authorizing the server-side advertising events described above. Purchase events instead use the choice saved at checkout, which can also be copied to a subscription. Clearing browser cookies does not change that saved choice or undo data already sent. Contact [email protected] to request withdrawal for purchase-event tracking or to exercise your data rights. Email-marketing consent is separate from the advertising choice; you can unsubscribe using the link in a marketing email. To adjust interest-based advertising, use the advertising preferences in your Meta, Google or TikTok account.

9. Data Retention

Account and purchase data is retained as long as your account is active or as required by Romanian accounting law (minimum 5 years for invoice records). You may request deletion of your personal data at any time.

10. International Transfers

Some of our third-party providers (Stripe, Meta, TikTok, Google) are based in the United States. Data transfers to the US are made under Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Contact

For privacy inquiries or to exercise your rights: [email protected]