Privacy Policy

Wizewerx Ltd (company number 06003824), 124 City Road, London, England, EC1V 2NX, is the data controller for personal data collected through this service.

This page explains what we collect, why we collect it, and what you can ask us to do with it. It covers two different groups of people, because Towncrier sits between them.

Who this covers

Customers — developers and companies with a Towncrier account, who install the widget in their own product.

End users — the visitors to a customer's product who are shown an announcement. For this group, our customer is the data controller and Towncrier is the processor: we handle that data on their instructions, and any request about it should go to them first.

What we collect from customers

• Your email address and name, via sign-in (email, Google or LinkedIn).
• The apps you create, the domains you add as allowed origins, and the content you write.
• Standard server logs for the dashboard.

What the widget collects about end users

When a customer installs the widget and passes a user ID, Towncrier stores the following against that ID so views can be attributed and the same announcement is not shown twice:

• The external user ID the customer's app supplies (data-user-id).
• Any metadata the customer chooses to pass, such as role, plan or locale.
• IP address, user agent and locale, recorded per visit.
• First and most recent visit time, and total visit count.
• Which announcements were viewed, and when.

IP address and user agent are personal data. They are recorded per visit and are visible to the customer whose app the widget runs in. Dismissals are stored in the visitor's own browser, not on our servers.

What we do not do

• We do not sell personal data.
• We do not use end-user data to build advertising profiles.
• We do not track end users across unrelated customers' apps.

Legal basis

For customer accounts, we process data to perform our contract with you. For end-user data, our customer determines the basis and is responsible for having one, and for telling their users that Towncrier is in use.

Your rights

You can ask us at any time what personal data we hold about you, have it corrected, have it deleted, or object to how we use it. Email support@towncrier.io and we will sort it — no hoops.

If you are an end user of a product that uses Towncrier, contact that product first — they control the data and we act on their instructions.

Who else processes this data

We use the following sub-processors to run the service:

• Scaleway and Hetzner — hosting and database infrastructure (EU).
• Wizewerx — email delivery and authentication, operated by us as part of our own shared services.

They act on our instructions and may not use your data for their own purposes. Both hosting providers operate within the EU, so data stays in the EU/EEA in normal operation.

How long we keep it

A job runs every day and enforces these windows automatically. They are not aspirations — deletion is carried out by code on a schedule.

• IP address and user agent — 30 days. After 30 days these are erased from the visit record. The visit itself remains for analytics, without them.
• Individual visit records — 12 months. Deleted after a year. Announcement view history is kept, with its link to the deleted visit removed, so a customer's view counts do not change.
• Visitor totals — first seen, last seen, visit count — are kept for as long as the customer's app exists, because they are what makes unique-user counts and "do not show this twice" work. They go when the app or account is deleted.
• Customer accounts — kept while the account is open, removed when it is closed.

Contact

Wizewerx Ltd (company number 06003824), registered in England and Wales.

124 City Road, London, England, EC1V 2NX.
Email support@towncrier.io.