Privacy policy
Last updated: October 2026
This privacy policy explains what personal data Klooker collects when you use klooker.com and the Klooker membership, why we collect it, who we share it with and what your rights are.
1. Who is responsible
The controller for your personal data is:
Klooker BV
Hannie Dankbaarpassage 14
1053 RT Amsterdam
The Netherlands
Chamber of Commerce (KvK): 62546252
VAT: NL854860800B01
Email: support@klooker.com
For any privacy question or request, email support@klooker.com.
2. What we collect
Account data. You can use Klooker without an account, as a visitor. If you create a free account, or become a paying member, we store:
- your email address, which you use to log in;
- the user ID of your login account;
- your access level: free or paid (a visitor has no account, so we store nothing about visitors);
- the date you signed up, and where on the site you signed up (for example the membership page, a shop page or the footer).
We do not ask for a password. Login happens through a one-time link that we email to you.
Membership data. Your membership status (free, trial, active or cancelled), your plan, start and renewal dates, and references to your subscription and customer record at our payment provider.
Saved shops ("My shops"). If you save a shop, we store which shop you saved, when you saved it, and where you saved it from (a shop page, the shop overview or My shops). If you remove a shop from My shops, we delete that entry.
Story reads (free accounts only). A free account includes 3 full shop stories per calendar month (Amsterdam time). To keep count, we store which shop stories you opened with "Read on", in which month, the date and time, and the language you read the story in. We use this only to count your free stories and show you how many you have left. We do not use it to build a profile of you or for advertising. We do not log stories read by paying members.
Upgrading to a paid membership. If you upgrade a free account, Stripe handles the payment (see "Payment data"). We keep your existing account record: your saved shops and preferences stay, and your access level changes to paid. If your paid membership ends, your account becomes a free account again, unless you ask us to delete it.
Payment data. Payments are handled by Stripe (and by PayPro for legacy members). Your card or bank details go directly to them. We never receive or store your full card or bank account number. We do receive limited information such as your name, billing country, payment status and invoices.
Newsletter data and preferences. If you sign up for the newsletter, we store your email address, your newsletter language, that you opted in, the exact sentence you agreed to, and the date and time of your consent. If you choose them, we also store the countries and topics you want to hear about. You can change these choices or unsubscribe at any time in your account, or through the unsubscribe link in every newsletter. If you unsubscribe, we also mark you as unsubscribed on our newsletter list.
Partner applications. If you apply to have your shop listed through "Join our program": your name, your email address, and details about your shop and offer.
Messages. The content of emails you send to us, and our replies.
Usage and technical data. Aggregated statistics about how the site is used (see section 6) and technical data our hosting providers need to deliver the site securely, such as your IP address and browser type.
We do not ask for sensitive data, such as data about health or religion.
3. Why we use it and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and running your free account, logging you in | Performance of a contract (art. 6(1)(b)) |
| Saving shops in My shops | Performance of a contract (art. 6(1)(b)) |
| Counting your free stories per month (free accounts) | Performance of a contract (art. 6(1)(b)) |
| Newsletter preferences (countries, topics) and sending the newsletter | Your consent (art. 6(1)(a)) |
| Logging you in, showing member discount codes, running your membership | Performance of a contract |
| Processing payments, trials, renewals and cancellations | Performance of a contract |
| Keeping invoices and financial records | Legal obligation |
| Emails about your account and membership (login links, receipts, trial and renewal notices, changes to our terms) | Performance of a contract |
| Sending the newsletter | Your consent |
| Handling partner applications and support questions | Legitimate interest in running and improving Klooker |
| Cookieless statistics (Plausible) and security | Legitimate interest in understanding site use and keeping the site safe |
| Google Analytics | Your consent |
We do not sell personal data, and we do not use your data for automated decisions that have legal or similarly significant effects on you.
4. Who we share data with
We use the following service providers. They process data on our behalf and only as needed for the purposes above:
| Provider | What they do for us |
|---|---|
| Lovable | App platform and hosting of klooker.com, including sending login emails (one-time login links). Our connection to Airtable also runs through Lovable. |
| Supabase (through Lovable) | Login and account authentication |
| Cloudflare | The network and servers that run and deliver the website (hosting and CDN), used through Lovable |
| Airtable | Our database for member records, saved shops, story reads, newsletter subscribers, shop listings and partner applications |
| Stripe | Payment processing, subscriptions and the customer portal |
| PayPro | Payment processing for legacy members |
| Mailchimp (Intuit) | Sending the newsletter |
| Plausible Analytics | Cookieless website statistics |
| Google Analytics 4 (Google) | Website statistics, only after you accept cookies |
Stripe and PayPro may also act as independent controllers for part of the payment processing (for example to prevent fraud and meet their own legal obligations). Their own privacy policies then apply.
When you visit a shop or use a discount code, you leave Klooker. The shop's own privacy policy applies to your visit and purchase. We do not pass your account data on to shops.
We may also share data if the law requires it.
5. Transfers outside the EU
Some of our providers (for example Airtable, Mailchimp, Google and Supabase) are based in the United States or may process data there. When data is transferred outside the European Economic Area, we make sure it is protected by an adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or by the European Commission's Standard Contractual Clauses. Plausible processes data in the EU.
6. Cookies and analytics
Plausible (always on, no cookies). We use Plausible Analytics to count visits, pages viewed, referring websites, outbound link clicks and file downloads. Plausible does not use cookies, does not store personal data in your browser and does not track you across websites. Statistics are only reported in aggregate.
Google Analytics 4 (only with your consent). When you first visit klooker.com, a banner asks whether you accept Google Analytics. Google Analytics is only loaded after you click Accept. If you reject or ignore the banner, it is not loaded and no Google Analytics cookies are placed. If you accept, Google Analytics places cookies (such as _ga and _ga_<ID>, which are kept for up to 2 years) to tell visits apart and measure how the site is used. We use it for statistics only, not for advertising. Advertising and personalisation features stay switched off.
What we measure. We count actions such as saving a shop, clicking "Read on", opening the sign-up form, seeing how many free stories are left, seeing the membership offer and starting checkout. These counts can include your access level (visitor, free or paid), the site language and, where relevant, which shop or page it was about. They never include your email address, your account ID or a discount code. In Plausible the counts only appear as totals. Google Analytics only receives them if you have accepted cookies.
Strictly necessary storage. Some data is stored in your browser because the site cannot work without it: your login session, your cookie choice and your language preference. No consent is needed for these, and they are not used for tracking.
Stripe. When you go to checkout or to the customer portal, Stripe may set its own cookies on its pages for security and fraud prevention. See Stripe's privacy policy.
Changing your choice. You can withdraw your consent at any time. Clear the cookies and site data for klooker.com in your browser, and the cookie banner will appear again so you can choose Reject. Withdrawing consent does not affect use of the site.
7. How long we keep data
- Account data and saved shops: for as long as your account is active. If you ask us to delete your account, we delete your account record, your login, your saved shops and your story reads within 90 days, except what we must keep by law (for example invoices, see below).
- Story reads (free accounts): only for as long as we need them for the monthly counter, and never longer than your account exists. We delete them on request.
- Inactive free accounts: we keep a free account while it is active, and delete it on request.
- Payment records and invoices: 7 years, as required by Dutch tax law.
- Newsletter data and preferences: until you unsubscribe. After that we only keep a record that you unsubscribed, so we do not email you again.
- Partner applications: for as long as needed to handle the application and, if your shop is listed, for as long as the listing runs.
- Support emails: up to 2 years after the last contact.
- Google Analytics data: up to 2 months.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have incorrect data corrected;
- have your data deleted;
- restrict or object to our use of your data;
- receive your data in a portable format;
- withdraw your consent at any time, for example by unsubscribing from the newsletter through the link in every newsletter or by changing your cookie choice.
You can remove saved shops yourself at any time, and change or withdraw your newsletter choices in your account. To delete your account, email support@klooker.com from the email address linked to your account.
To use these rights, email support@klooker.com from the email address linked to your account. We reply within one month. We may ask you to confirm your identity first.
You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). We would appreciate the chance to resolve your concern first.
9. Security
We take appropriate technical and organisational measures to protect your data. These include encrypted connections (HTTPS), passwordless login, access only for people who need it, and working with established providers. Because login links are sent by email, please keep your email account secure.
10. Children
Klooker is intended for adults. We do not knowingly collect data from children under 16. If you think a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy when our Service, providers or the law change. The latest version is always on this page, with the date it was last updated. If a change is significant, we will let members know by email.
12. Contact
Klooker BV
Hannie Dankbaarpassage 14, 1053 RT Amsterdam, The Netherlands
support@klooker.com