- Last updated
- 15 September 2026
- Effective date
- 15 September 2026
1. Scope and service
Exploripo is an editorial software-discovery website. It does not currently provide public user accounts, comments, on-site checkout or payment processing, and it does not operate a public contact form.
This policy covers data handled on the Exploripo website, through the newsletter signup, when you email Exploripo, and through optional analytics. A third-party website you visit through an outbound link applies its own privacy terms.
2. Data, purposes and legal bases
Exploripo limits collection to the data needed for the functions described below. The legal basis that applies depends on the purpose and circumstances described.
| Activity | Data | Purpose and legal basis |
|---|---|---|
| Site delivery and security | Technical request data that a production web server may receive, such as IP address, time, requested URL and browser or user-agent data, depending on the hosting configuration. | Deliver, protect and troubleshoot the site; legitimate interests under Article 6(1)(f) GDPR, subject to the required balancing review. |
| Email contact | Your email address, sender details, message and any attachments you choose to send. | Answer your request; legitimate interests under Article 6(1)(f), steps requested before a contract under Article 6(1)(b), or a legal obligation under Article 6(1)(c), as applicable. |
| Newsletter | Email address plus signup, confirmation, unsubscribe, delivery and technical records generated by Kit. | Send the newsletter after double opt-in; consent under Article 6(1)(a). |
| Optional analytics | If activated and accepted: pseudonymous client identifiers, page and session events, referrer, browser and device information, and approximate location derived by Google Analytics. | Measure site use and improve editorial navigation; consent under Article 6(1)(a) and the applicable cookie rules. |
| First-party affiliate click counts | After analytics consent: daily aggregate counts by software, call-to-action position, page type and broad device type. No visitor identifier, email, search query, full page URL or full IP address is stored in this aggregate. | Understand which disclosed outbound links are useful; consent under Article 6(1)(a) and the applicable cookie rules. |
| Outbound affiliate visit | When you choose an affiliate link, the destination receives a normal browser request and the affiliate parameter in that link. | Open the destination you requested and attribute a possible referral; the destination and affiliate provider apply their own terms. |
3. Newsletter and Kit
Exploripo uses Kit, operated by Kit, Inc., for newsletter subscriptions and delivery. The signup asks only for an email address. The browser submits it directly to Kit; Exploripo does not store newsletter email addresses in WordPress.
Kit sends a confirmation request using double opt-in, and every newsletter includes an unsubscribe route. You can withdraw consent at any time by unsubscribing or by contacting Exploripo. Withdrawal does not affect processing that was lawful before withdrawal.
Kit documents that its forms use a cookie to recognise subscription state. The available official form documentation does not identify its exact name or duration. Exploripo will verify the live behavior when the production service is activated and update this policy if necessary.
4. Analytics choices
Google Analytics 4 is prepared but is not active unless a valid production measurement ID is configured and you affirmatively accept Analytics. In the implemented basic consent mode, no Google Analytics request or cookieless ping is sent before that choice.
Advertising storage, advertising user data and advertising personalisation remain denied. Google Signals and advertising-personalisation signals are disabled. Google states that IP addresses from EU users are used for coarse geolocation and then discarded before data is logged.
The approved target for Google Analytics event and user data retention is 14 months. The production property setting will be verified before Analytics is activated.
You may reject analytics initially or change your choice later through Cookie Settings. Rejecting or withdrawing consent also triggers a best-effort removal of Exploripo-domain Google Analytics cookies.
5. Service providers, recipients and transfers
Service providers receive data only for the relevant function. Production hosting, mailbox and optional analytics settings are verified operationally when those services are activated.
| Recipient | Role and data | Location or safeguards |
|---|---|---|
| Website hosting and security providers | Hosts and secures the website; may process technical request and server-log data. | The provider, processing locations and applicable safeguards depend on the final contracted production service. |
| Email hosting provider | Processes messages sent to contact@exploripo.com. | The provider, processing locations and applicable safeguards depend on the final contracted mailbox service. |
| Kit, Inc. | Newsletter subscription and delivery provider; processes the email address and provider-generated newsletter records. | United States; Kit identifies the EU–U.S. Data Privacy Framework and Standard Contractual Clauses as transfer mechanisms in its Data Processing Addendum. |
| Google Ireland Limited | Google Analytics provider, but only if GA4 is configured and the visitor accepts Analytics. | EEA and possible global processing; Google identifies the Data Privacy Framework and Standard Contractual Clauses as transfer safeguards. |
| Affiliate destinations and platforms | Receive data only after you choose an outbound link. Current approved destinations are Synthesia, Pictory, MailerLite, Systeme.io, Beehiiv and AWeber. | They act under their own privacy terms, which apply after you leave Exploripo. |
6. Retention
Exploripo keeps data only as long as needed for the purpose, applicable claims and legal duties. Where a provider controls technical retention, the applicable account and service settings also apply.
| Data | Retention |
|---|---|
| Consent preference cookie | 180 days, unless you replace or delete it sooner. |
| First-party aggregate affiliate click counts | 366 days. |
| Newsletter records | For as long as needed to provide the subscription, handle unsubscribe or deletion requests and keep any minimal suppression record needed to honour those requests or legal obligations. |
| Google Analytics event and user data | 14 months after Analytics is activated. This is the approved target; the production property setting must be verified before activation. |
| Contact email | For as long as reasonably necessary to answer the message, manage related follow-up and meet applicable legal obligations or handle claims. |
| Technical and security logs | Only for as long as reasonably necessary for security, troubleshooting and service operation, subject to the hosting provider’s technical retention settings and applicable legal obligations. |
7. Your data-protection rights
Depending on the circumstances, you may request access, rectification, erasure, restriction or portability of your personal data, and you may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time.
Send a request to contact@exploripo.com. Exploripo may need proportionate information to confirm identity and normally must respond within one month, subject to the GDPR rules for complex or repeated requests.
You may also complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ) or another competent supervisory authority.
8. Security, children and automated decisions
Exploripo applies proportionate technical and organisational measures intended to protect the site and limit data collection. No internet transmission or storage system can be guaranteed completely secure.
The site is a general-audience software resource and is not designed to collect data from children. Exploripo does not use personal data for solely automated decisions that produce legal or similarly significant effects.
9. Changes and contact
This policy may change when the service, providers or law changes. Material changes will be reflected here with a revised date and, where required, a new consent request.
For privacy questions or rights requests, email contact@exploripo.com.
10. Data Controller and Contact Information
Vít Kameník operates exploripo.com under the Exploripo brand and is the controller of personal data handled through the website.
Privacy questions and requests may be sent to contact@exploripo.com.
Complete statutory operator information is available on the Operator Information page.