- Company
- Peejee.tv VOF, trading as Gradetonic
- Address
- Nieuwpoortkade 2A, 1055 RX Amsterdam, The Netherlands
- Chamber of Commerce
- 96879629
- VAT
- NL867812345B01
- Contact
- [email protected] · +31 20 369 4294
This policy explains which personal data Gradetonic processes, why, and for how long. In short: the website uses no cookies and no tracking across sites, we never record your streams, and our servers are in the EU.
The website
- No cookies. The website sets no cookies, stores nothing on your device and loads no scripts or fonts from other companies.
- Visitor statistics. Cloudflare counts the requests it handles while delivering the website, and we look at the totals: page requests, countries, browser types and errors. This needs no script and no cookies, and gives us no profile of you. Basis: our legitimate interest in running and securing the website.
- Delivery and server logs. The website is delivered through Cloudflare, which protects it against attacks and sees your IP address. Like any web server, ours keeps short-lived access logs with IP addresses for security and troubleshooting.
- Live demo. The demo page connects your browser to our streaming server, which sees your IP address for the duration of the connection.
Your account
When you sign up and use Gradetonic we process:
| Data | Why | Basis |
|---|---|---|
| Email address, company name, password (stored only as a hash) | Your account and login | Contract |
| Billing details: company, address, VAT number | Invoices and VAT | Contract, legal obligation |
| Payments | Paying for passes and subscriptions | Contract |
| IP addresses and login times | Security, preventing abuse of the free trial | Legitimate interest |
| Usage: stream status, minutes and hours per room | Running the service, fair use, compensation | Contract |
| Support emails | Helping you | Contract |
Card and bank details are handled by Stripe and never reach our servers. When you choose a password, we check it against known data breaches using a method that never sends your password or its full hash.
Viewers in your rooms
Your viewers don’t need an account. For each viewer we process the IP address, device type and session times, so you can see who is watching and remove anyone, and so viewer limits work. If you switch on “Ask viewers for their name”, we also store the name a viewer enters; only you see it. A functional cookie keeps a viewer logged in to a room for up to 24 hours.
For this data you are the controller and we are your processor. Our processing appendix applies.
We never record, store or analyse the picture or sound you stream.
How long we keep data
| Data | Retention |
|---|---|
| Viewer IP addresses | Removed after 30 days |
| Viewer session records and viewer names | Deleted after 90 days |
| Payment notifications from Stripe | 90 days |
| Security audit log | 2 years |
| Invoices and financial records | 7 years (Dutch tax law) |
| Account data | As long as your account exists |
Who we share data with
We don’t sell data and don’t share it for advertising. These companies process data for us:
| Company | What for | Where |
|---|---|---|
| Hetzner Online | Servers for the platform and streaming; encrypted backups | Germany |
| Streaming statistics service (named to customers in their account) | Viewer statistics for the streaming servers | United States |
| Stripe | Payments | EU (Stripe Payments Europe, Ireland) |
| Moneybird | Invoicing and bookkeeping | Netherlands |
| Key (ky.nl, Woerden), on a StablePoint server (World Host Group) | Web hosting and our own mail server for service emails | Germany (Frankfurt) |
| Cloudflare | Delivering and protecting the website, visitor statistics | EU and worldwide network |
| SpamExperts | Filtering incoming email | EU |
| European Commission (VIES) | Checking VAT numbers | EU |
| Have I Been Pwned | Checking passwords against breaches, without sending the password | Partial hash only |
Transfers outside the EU
One service we use is located outside the European Economic Area: the streaming statistics service, in the United States. It receives the IP address and session and traffic data of viewers in rooms, and uses them only to produce viewing statistics; according to the provider, IP addresses are not stored after processing. The safeguards for this transfer under the GDPR are under review, and we will update this policy when they are in place. All other data stays within the EEA.
Your rights
You can ask us to see, correct or delete your personal data, to restrict or object to its processing, or to receive it in a portable format. Email us at the address below. If you think we handle your data incorrectly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
Passwords are stored only as strong hashes, connections are encrypted, sessions expire, and access to our systems is limited and logged.
Changes
We announce material changes to this policy in your account and by email before they take effect.