A small website
data footprint.

Last updated 2026-08-27

Public website

BetterKafka.com serves HTML, CSS, fonts, images and same-origin product services from the BetterKafka host. It does not load third-party marketing analytics, advertising pixels or social widgets. Ordinary browsing does not set a marketing cookie.

Free trial

When you request a trial, BetterKafka processes the email address you submit, verification and eligibility identifiers, request and activation timestamps, network address and user agent. Email verification is the main account signal. Network address is used only as a proportionate abuse-risk signal and is not treated as proof of identity. We set a Secure, HttpOnly, host-only first-party device cookie for 31 days for trial-abuse prevention, plus a short-lived functional claim cookie for the one-time key reveal.

Encrypted email is removed when verification and delivery no longer need it. Pseudonymous eligibility signals remain through the 30-day cooldown and are deleted or irreversibly replaced on the next cleanup run, up to 24 hours later. For an activated 24-hour trial, installation-binding data can therefore remain for about 32 days after activation. An unactivated trial is normally anonymized within 31 days of issue; one activated at the end of its seven-day activation window is normally anonymized within 39 days of issue. Non-identifying licence lifecycle dates and the tamper-evident security audit ledger are retained separately for security and legal accountability. A longer hold may apply when needed to investigate fraud, protect the service or comply with law. Trial information is not used for advertising and is not sold.

Purposes and legal bases

Trial email and activation information is processed to take the steps you request before entering a licence agreement and to deliver the evaluation. Security logs, rate limits, device signals and fraud controls are processed for the legitimate interests of protecting users, BetterKafka systems and the fairness of the trial. Accounting or compliance records are processed when a legal obligation applies. BetterKafka does not rely on the trial checkbox as consent for advertising.

Server access logs

The web server records ordinary security and reliability information such as the requested path, time, response status, user agent, referrer, and network address. Raw access logs rotate daily and are retained for no more than seven days on the current host. Keyed, pseudonymous network-risk and security signals are kept for 30 days. They are used to investigate abuse and service failures.

Backups

Encrypted operational backups can retain a residual copy of trial information for up to 31 days after it is removed from the live service. Backup access is restricted and recovery keys are held separately from the host. A restore procedure reapplies expiry and deletion work before normal service resumes.

Service providers and transfers

BetterKafka uses Contabo for hosting, Google Workspace for outbound trial email and Namecheap for DNS and support-email forwarding. These providers process only the information needed for their service and act under their own security and privacy terms. Where personal data is processed outside the European Economic Area, the transfer must use an applicable adequacy decision or contractual safeguards. Details of the current safeguard can be requested from the privacy contact.

Checkout and account services

Paid checkout is currently disabled and will remain disabled until Paddle completes seller verification. If checkout is enabled later, Paddle will process payment, tax, invoices, subscription and account data under its own notices. BetterKafka will receive provider identifiers and verified commercial state needed to provision the licence; card details will not pass through the BetterKafka website or Licence Authority.

Licence authority

Online licensing processes a pseudonymous installation identifier, product version, aggregate configured-cluster count, licence state, and renewal metadata. It does not receive Kafka brokers, topics, consumer groups, records, payloads, or application user identities.

Your Kafka data

The BetterKafka operations console is self-hosted. Kafka connection details and records remain on the runtime data path configured in your Kubernetes environment. Billing, trial services and the public website are not in that path.

Your rights

Depending on the circumstances, you may ask for access to, correction, deletion, restriction or portability of your personal data, or object to processing based on legitimate interests. You may also complain to the Danish Data Protection Agency or your local supervisory authority. Contact support@betterkafka.com to exercise a right. Some information may be retained when required for security, accounting, contract or legal obligations. Mandatory data-protection rights are not limited by this notice.

Changes

This notice will be updated before a new analytics, account, support, or checkout processor is enabled. The published effective date changes with it.