Privacy Policy

1. Introduction

Welcome to Qbuster ("we," "our," or "us"), operated by CERTIFIT, SIA (Registration No. 40203254546, VAT No. LV40203254546), headquartered in Riga, Latvia. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy applies to all information collected through our website (https://qbuster.xyz) and any related services, sales, marketing, or events.

If you have any questions or concerns about this privacy notice or our practices with regard to your personal information, please contact us at hello@qbuster.xyz.

2. Information We Collect

Personal Information You Disclose to Us

We collect personal information that you voluntarily provide to us when you register on the Website, express an interest in obtaining information about us or our products and services, when you participate in activities on the Website, or otherwise when you contact us.

• Names
• Email addresses
• Passwords (stored securely using industry-standard hashing)
• Billing addresses and payment information (processed via Stripe; see Section 6)

Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the Website. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Website, and other technical information.

3. How We Use Your Information

We use personal information collected via our Website for a variety of business purposes described below. We process your personal information for these purposes based on the following legal grounds:

• Performance of a contract: To facilitate account creation, manage your subscription, and fulfill and manage your orders.
• Legitimate interest: To protect our services, send administrative information to you, and improve our website.
• Consent: To collect analytics data about how you use our website (only when you have given consent via our cookie banner).
• Legal obligation: To comply with applicable laws and regulations.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to access or store information. You can manage your preferences at any time using our Cookie Settings.

Strictly Necessary Cookies

These cookies are essential for you to browse the website and use its features. They cannot be disabled. They include:

• Session cookie (__session) — Required for login, security, and maintaining your session. Expires when you close your browser or after inactivity.
• CSRF protection — Stored within the session cookie to protect against cross-site request forgery attacks.
• Cookie consent (cookie_consent) — Stores your cookie preferences. Expires after 365 days.
• Language preference (django_language) — Remembers your chosen display language.

Analytics Cookies (Require Consent)

We use the following analytics services to collect information about how visitors use our site. These cookies are only set if you consent via our cookie banner. We use the information to compile reports and to help us improve the site. The cookies collect information in a way that does not directly identify anyone.

• Google Analytics (GA4) — We use Google Analytics with IP anonymization enabled to understand website usage patterns. Google Analytics may set cookies such as _ga and _ga_*. Google's Privacy Policy.
• Firebase Analytics — We use Firebase Analytics as part of our hosting infrastructure to collect usage data. Firebase Privacy Policy.
• Meta Pixel (Facebook Pixel) — We use the Meta Pixel to track conversions from Facebook advertisements and build targeted audiences. This tracking only occurs if you grant consent for Analytics. Meta's Privacy Policy.

Advertising

We run advertising campaigns via Google Ads and Meta Platforms (Facebook/Instagram). Our advertising accounts are linked to our analytics to measure the effectiveness of our advertising (e.g., tracking sign-up conversions). No additional advertising cookies are set by our website beyond the analytics cookies described above. When you click on one of our ads, the respective provider may set cookies on your browser subject to their own privacy policies.

5. Third-Party Service Providers

We share your information with the following third-party service providers who assist us in operating our business:

• Stripe — Payment processing. When you make a payment, your billing information is processed directly by Stripe. We do not store your full credit card details. Stripe's Privacy Policy.
• Brevo (formerly Sendinblue) — Email delivery service for transactional emails such as order confirmations and password resets. Brevo's Privacy Policy.
• Google Cloud Platform — Our application is hosted on Google Cloud Run, and uploaded files (such as menu images) are stored in Google Cloud Storage. Google Cloud's Privacy Notice.
• Google Fonts — We load the Inter font from Google Fonts. When you visit our site, your browser makes a request to Google's servers, which may include your IP address. Google Fonts Privacy.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Specifically:

• Account data (name, email) — Retained for the lifetime of your account. Deleted upon account deletion request.
• Order data — Retained for as long as your account is active, for operational and record-keeping purposes.
• Analytics data — Retained by Google Analytics and Firebase according to their default retention policies (typically 14 months for GA4).
• Cookie consent preferences — Stored for 365 days in a browser cookie.

7. Your Privacy Rights

In some regions (like the EEA, UK, and Switzerland), you have certain rights under applicable data protection laws. These may include:

• The right to access and obtain a copy of your personal information.
• The right to request rectification or erasure of your personal information.
• The right to restrict the processing of your personal information.
• The right to data portability (where applicable).
• The right to withdraw consent at any time (for consent-based processing, such as analytics cookies — you may withdraw via our Cookie Settings).
• The right to lodge a complaint with your local data protection authority.

To exercise these rights, please contact us at hello@qbuster.xyz.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed.

9. Contact Us

If you have questions or comments about this policy, you may contact us at: