Privacy policy

Who we are

CueStride is operated by Handz LTD, a company registered in Israel, at Jerusalem 14, Givat Shmuel, Israel. This policy covers this site, cuestride.com, and the app at app.cuestride.com. We decide how the personal data described here is used, except where this policy says a partner decides with us or on its own. Our Chief Security Officer is in charge of protecting personal information at Handz LTD. Questions and requests about this policy or your data go to them at privacy@cuestride.com.

In short

• Screens need no account: a room's viewer link is all a screen needs. Screens, including this site's timers, carry no analytics and no advertising.
• We use personal data to run CueStride, to learn how it is used, to advertise it, and, if you ask for it, to email you about it.
• Where the law requires your agreement, analytics and advertising cookies are used only after you give it. You can change your choice at any time with "Cookie settings".
• We do not sell personal data for money. Some US state laws count our advertising as "selling" or "sharing" personal data: you can opt out with "Your privacy choices", and we honour Global Privacy Control.
• Marketing email goes only to people who asked for it, and every one has a link to unsubscribe.
• Payments are handled by Paddle, and card details never reach our servers.
• CueStride's servers are in the United States.

What we collect, and why

If you have an account. When you sign in, our sign-in provider, WorkOS, gives us your name, your email address, and the organization and role you belong to. We keep them, with the time of your last sign-in, to run your account. When an admin invites someone, the invitee's email address and role go to WorkOS, which sends the invitation. An organization's name, plan, and branding (its logo, whether the CueStride wordmark shows, and its screen theme) are kept with the account. The logo is published at a public address so the organization's screens can show it.

Billing. We keep the plan, its add-ons, the state of the subscription, each event pass bought with the plan the account had before it, so that a refund can undo it, and Paddle's ids for the customer, the subscription, and each pass's payment. Paddle is the merchant of record: it takes the payment and keeps the card, the billing address, and the invoice under its own privacy policy. We keep no card details. At checkout the admin's email address is passed to Paddle.

What you put into a room. The room's name, its timers, speakers, notes, labels, and messages, and the names and programme of an event. This can include other people's names, such as a speaker's. The people who hold a room's links see it: a screen sees the room's name, its timers, speakers, labels, and the messages on show, but never the notes; a controller sees everything. A room also takes the time zone of the browser that created it. When an organization uses CueStride, it decides what goes into its rooms, and for that content we act on its behalf, as our terms describe. Room content never goes to our analytics or advertising partners.

Screens. A browser that opens a room keeps a random id, so the room's controller can tell its screens apart, rename them, and ask one to reload, flip, or go fullscreen. The id belongs to the browser, not to a person, unless someone names the screen; a name given to a screen is kept with the room. While a screen or controller is connected, the room's controllers see the list of connections, with the name of each signed-in member.

How CueStride is used. With our analytics provider, PostHog, we record how this site and the app are used: which pages are viewed, and actions such as creating a room, starting a timer, or opening the checkout. With each, PostHog records the address of the page, without the secret part of a room's link and without a room's name, and with any campaign tags in it (such as utm_source, or the id of an ad you clicked); the page that linked to it; the browser, its version, and its language; the operating system; the device type and model; the screen and window size; the time zone; and an approximate location (such as country, region, city, and postal code) that it works out from your IP address, which on this site reaches PostHog through our server. PostHog keeps a random id and the current visit in a cookie, so that it can tell your visits apart and see which visits led to a sign-up, and it records the ids that advertising cookies hold, if you allowed them, so that a visit can be tied to the ad that brought it. When you are signed in, we link what you do to your account and its organization, and PostHog keeps a profile of your account with the details above. We never record what a room contains, what you type, or your screen, and we send PostHog no name or email address. Screens are never measured: a room's viewer, agenda, and board, an event's agenda, any page that embeds them, and this site's timers.

Counting visits to this site. Cloudflare, which carries all traffic to CueStride, also counts visits to this site's pages with its Web Analytics, except for visitors in the European Union. A small script from Cloudflare runs on each page of this site, other than its timers, and reports to Cloudflare the address of the page, without any query in it; the page that linked to it; the country you are visiting from; your browser, operating system, and device type; and how quickly the page loaded. It sets no cookie and keeps nothing on your device. Cloudflare shows us only totals, such as the number of visits and page views by page, country, or browser, never a single visit or your IP address. It does not run in the app, so no screen is ever counted.

Advertising. To advertise CueStride and measure our ads, we use pixels (small pieces of code) from these advertising platforms: Meta (Facebook and Instagram), Google, Microsoft, TikTok, Snap, X, LinkedIn, Reddit. We add a platform to this list before we use it and, where your agreement is required, ask again before any data goes to it. Their pixels run on this site, cuestride.com, except its timers, and never in the app. They set and read cookies and identifiers on your device. They send the platform the address and title of each page you view here, the page that linked to it, the buttons you click and their labels, the names of the form fields on the page (not what you type in them), your IP address, your browser's and device's details (such as its language and screen size), the time, and the ad you clicked, if any.

When you sign up or buy, our server reports it to the platforms, if your advertising choice for your account, and in the browser you used, allows it, through their conversion services: what happened (a sign-up, or a purchase with the plan and its price), your email address in hashed form (scrambled, so that the platform can match it only to an account it already knows), your IP address and browser's details, and the ids that the platform's cookies and ad click gave your browser. We may also give these platforms, in the same hashed form, the email addresses of our customers and of subscribers who, after confirming their address, clicked to allow advertising, so that they can show them our ads or leave them out of ads for what they already have; when you refuse, we take your address out of those lists at their next update. The platforms use all of this to show you our ads on their services and elsewhere, based on your visit here; to measure which ads lead to visits, sign-ups, and purchases; and to find people like our customers. They may link your visit to the other devices on which you use their services. Where the law requires your agreement, none of this happens until you give it.

For what their pixels collect on this site, and for our conversion reports, each platform and we are joint controllers in Europe. Under our arrangements with them, we are responsible for telling you about it (this policy) and for asking your agreement where it is required; each platform is responsible for what it does with the data once it has it, under its own privacy policy (listed under Who else handles data), and for answering requests about that data. You can use your rights with us or with the platform. Meta publishes the terms of its arrangement in its Controller Addendum. You can also limit ads from these platforms in your settings with them, and through aboutads.info/choices in the United States and youronlinechoices.eu in Europe. Google explains how it uses data from sites that use its services at business.safety.google/privacy, and you can manage its ads in Google's Ads Settings.

Emails. Service emails go to everyone with an account: sign-in codes and invitations (sent by WorkOS), receipts (sent by Paddle), and messages about your account, your plan, and changes to our terms or this policy (sent by Brevo, without tracking of opens or clicks).

Marketing email (news, tips, and offers about CueStride) goes only to people who asked for it: by ticking a box, never ticked in advance, after the first sign-in or in your profile in the app, or by subscribing on this site and confirming by email. The form on this site sends your address to our server, which passes it to Brevo. For marketing email we keep your email address, your name, when and where you subscribed, and whether you are subscribed. Brevo records when each email is delivered. A second box, also never ticked in advance, lets us see when you open our marketing email and which of its links you click, with the IP address and device of the open or click; without it, our marketing email to you carries no open or click tracking. Every marketing email says who sends it and how to reach us, and has a link to unsubscribe, a link to stop the tracking, and a link to stop us giving your address to the advertising platforms, which holds for every record we have under that address until you allow it again.

The unsubscribe link in a marketing email stops marketing email until you subscribe again; it does not stop service emails. Many mail apps also show an unsubscribe button on our service emails. If you use it, or mark one of those emails as spam, Brevo stops sending you our messages about your account, your plan, and changes to our terms or this policy, until you ask us to start them again.

Naming customers. As our terms allow, we may name an organization as a CueStride customer and show its logo. We never publish a person's name this way.

Your address and our logs. Your IP address is used to apply limits that protect the service from abuse. It is held only in the server's memory, while your connection is open or a limit still counts it, and forgotten about a minute after; it is never written to our database or our logs. PostHog and the advertising platforms receive it, as described above, when your choices allow it; PostHog discards it once it has worked out the location, as we have set it to do. Our logs record each request's method, path, status, and duration, and account events such as a sign-in with the account's id. They hold no IP addresses and none of the secrets in links.

No law requires you to give us personal data. Without an email address you cannot have an account; without your agreement we send you no marketing email and, where the law requires your agreement, use no analytics or advertising cookies.

Why we may use it

• To provide what you signed up for: your account, your rooms, your plan and its billing, and the service emails that come with them.
• Our legitimate interest in keeping CueStride secure and running: the limits against abuse, our logs, and our backups.
• Analytics and advertising (our analytics with PostHog, the platforms' cookies and pixels, the conversions we report, and the customer lists we give them): your consent in the European Economic Area, the United Kingdom, Switzerland, and Quebec; elsewhere, our legitimate interest in understanding how CueStride is used and in advertising it.
• Counting visits to this site with Cloudflare's Web Analytics, which uses no cookie and does not run for visitors in the European Union: our legitimate interest in knowing which of this site's pages are visited and how quickly they load.
• Marketing email, and tracking its opens and clicks: your consent, each asked for separately.
• Our legitimate interest in showing which organizations use CueStride: naming customers.
• Our legal obligations, such as keeping accounting records and being able to show the consents you gave us.

We make no decision about you that has legal or similarly significant effects by automated means alone. The advertising platforms do use data about you to choose which ads to show you, which is a form of profiling; you can refuse it as described under Your rights. We do not use personal data to train language models, and we do not sell it for that.

Cookies and browser storage

The app, at app.cuestride.com, sets these cookies it needs to work. All are HttpOnly and SameSite=Lax, and Secure over https:

• cs_session keeps you signed in, for 30 days, renewed while you use the app.
• cs_state and cs_redirect protect a sign-in and remember where it returns, for 10 minutes.
• cs_pass_ followed by a room's id lets a screen into a room with a password, for 30 days, and stops working when the password changes.

The app also keeps these in your browser's storage, on your device only: the screen's random id (cuestride.device); the rooms you made without an account, with their controller links (cuestride-device-rooms); and your choices of theme, sound, and screen flip (cuestride-theme, cuestride.sound, and cuestride.viewer.flip).

A cookie on cuestride.com and the app, cs_consent, keeps the choices you make, for up to a year, and our server records each one. Where you have not chosen, the default for the place you are visiting from applies each time, and is not kept; for your account, it follows the country of your latest visit while signed in, which we keep with the account for that purpose. Where the law requires your agreement, these are used only once you give it, and elsewhere until you turn them off:

• Analytics, on this site and in the app: PostHog's cookie, with a copy in your browser's storage, holding a random id and the current visit, for up to a year.
• Advertising, on this site only: the advertising platforms' cookies, holding ids that let each platform recognise your browser. Some are set on cuestride.com, each for between a day and 13 months. Others are the platforms' own cookies, on their own domains (such as google.com, doubleclick.net, facebook.com, and tiktok.com), which last as long as each platform sets; Google's last up to 13 months in the European Economic Area, the United Kingdom, and Switzerland, and up to 24 months elsewhere.

Cloudflare's count of visits to this site (see Counting visits to this site, above) sets no cookie and keeps nothing in your browser.

"Cookie settings" and "Your privacy choices", at the bottom of every page of this site and in the app's menu, list each of these cookies with its purpose and lifetime, and let you change your choices at any time. The sign-in pages of WorkOS and the checkout of Paddle may set cookies of their own, under their policies.

Who else handles data

These providers handle data for us, only to provide their service to us, under agreements that bind them to it:

• WorkOS: sign-in, sign-in codes, and invitations, with names, email addresses, and memberships.
• Cloudflare: carries all traffic to CueStride, runs its domain names, stores the database's backups, and counts visits to this site (Web Analytics).
• Hetzner: the servers that run CueStride and hold its database.
• PostHog: our analytics.
• Brevo (Sendinblue SAS, France): our service and marketing email.

These receive data as controllers in their own right, under their own privacy policies:

• Paddle, our merchant of record, for payments (its privacy policy).
• The advertising platforms, for what they do with the data their pixels and our reports send them: Meta (Facebook and Instagram), Google, Microsoft, TikTok, Snap, X, LinkedIn, Reddit.

Brevo also uses some data as a controller for purposes of its own: to keep its service free of abuse, spam, and fraud, and for its own statistics. We disclose personal data where the law requires us to.

Selling and sharing, under US state laws

We do not sell personal data for money. When your advertising choice allows it, some US state laws, such as California's, treat what the platforms' pixels collect on this site, the conversions we report, and the customer lists we give them as "selling" personal data or "sharing" it for targeted advertising. What goes to them this way: identifiers (cookie ids, IP addresses, hashed email addresses, and browser and device details), what you do on this site, and commercial information (that you signed up or bought, with the plan and its price). To opt out, use "Your privacy choices" at the bottom of every page of this site or in the app's menu, or turn on Global Privacy Control in your browser: we treat it as an opt-out for that browser and, if you are signed in, for your account, and the page shows that we have. We do not knowingly sell or share the personal data of anyone under 16.

Where it is kept

CueStride runs on servers in the United States, and its backups are stored with Cloudflare, which we ask to keep them in North America. Cloudflare carries traffic, and counts visits to this site, on its network of data centres around the world. PostHog keeps our analytics in the United States. Brevo keeps our email data in the European Union, in France, Germany, and Belgium, and its support staff in the United States and India may reach it. The advertising platforms process data in the United States and the other countries where they operate. If you are outside the United States, your data is transferred there. For data from the European Economic Area, the United Kingdom, and Switzerland, we rely on the EU-US Data Privacy Framework, with its UK and Swiss parts, for providers certified under it, which the European Commission and the UK and Swiss governments have found to protect data adequately; for other providers and countries, we rely on the European Commission's standard contractual clauses, with the UK's addendum. From Israel, we transfer data abroad as Israel's rules on transfers from databases abroad allow. You can ask us for a copy of these safeguards at privacy@cuestride.com.

How long we keep it

• A room made without an account: deleted after 90 days without activity.
• Your account, and the rooms and settings of your organization: while the account exists. When you ask us to delete it, we do so within 30 days, together with its analytics profile and its contact at Brevo, apart from the records below that show your consent and that you unsubscribed; the backups let go of it within 30 days after that.
• A room you delete: gone from the database within about 15 minutes.
• Backups: a continuous copy kept for 30 days, and nightly copies kept for up to 30 days, so deleted data leaves them within 30 days.
• Billing records: the plan changes and Paddle's ids, for as long as we must keep accounting records.
• Your IP address: in memory only, while your connection is open or a limit still counts it, and about a minute after. Logs: until they are rotated out, by size.
• Analytics: PostHog keeps events for the period its plan sets, at most seven years, and we cannot make it shorter. It keeps your account's profile until we delete it. When your account is deleted, or sooner if you ask, we delete the profile and the events linked to it.
• Counts of visits to this site: Cloudflare keeps them for the period its Web Analytics service sets. They are totals, and we see no single visit in them.
• Advertising cookies: those on cuestride.com, up to 13 months on your device, unless you clear them or withdraw your agreement; the platforms' own cookies, as long as each platform sets, and Google's up to 24 months outside the European Economic Area, the United Kingdom, and Switzerland. The platforms keep what they receive under their own policies.
• Your marketing subscription: while you are subscribed, with Brevo's records of each email's delivery, opens, and clicks. When you unsubscribe, your address stays on Brevo's list of addresses we must not write to, for as long as you stay unsubscribed.
• Records of the consents you gave, for cookies and for email, and of their withdrawal: up to seven years, as long as a claim about them could be brought.

Your rights

You can ask for a copy of your personal data, for it to be corrected or deleted, for its use to be restricted, or for it in a form you can take elsewhere. You can withdraw any consent you gave, at any time, without affecting what was done before you withdrew it: for cookies with "Cookie settings", and for marketing email with the unsubscribe link in any of them. In the US states whose laws give these rights, you can also ask what we collected, sold, or shared about you in the last 12 months, and we will not treat you differently for using your rights.

You can object at any time to our use of your data for marketing, including marketing email and the advertising and profiling described above, and to any use we base on our legitimate interests, such as our analytics. Once you object to marketing, we stop using your data for it.

Write to privacy@cuestride.com from the address on your account or subscription, or, if you have neither, tell us how to find your data, and we answer within 30 days. If we turn down a request, you can appeal by replying to our answer; we decide an appeal within 45 days and, if we turn it down, tell you how to complain to your state's attorney general. You can also complain to the Privacy Protection Authority in Israel, or to the data protection authority where you live.

Security

Every connection to CueStride is encrypted. The secrets in room links and the passwords of rooms are stored only as hashes, and never sent to our analytics or advertising partners; card details are never stored. No system is perfect: if a breach puts your data at risk, we tell you as the law requires. Only the people who run CueStride can reach its servers and its data.

Children

Accounts are for people aged 18 or over, and CueStride is not meant for children. We do not knowingly collect a child's personal data, advertise to children, or give their data to advertising platforms.

Other services

CueStride links to services that have their own privacy policies, such as the sign-in pages of WorkOS, the checkout of Paddle, and the advertising platforms. This policy does not cover what they do with data on their own services. The pages Brevo shows when you confirm or manage a subscription are run for us, and this policy covers them.

Changes to this policy

We update this page when what we do changes, and we tell account holders of a material change by email before it applies. The date at the top of this page is the version in force.

Contact

privacy@cuestride.com, or by post to Handz LTD, Jerusalem 14, Givat Shmuel, Israel.