Skip to content
One Click DPP

Legal information

Privacy Policy

How the One Click DPP website handles contact requests, privacy-minimal traffic data and essential settings.

Website-only version — updated 3 September 2026

Data controller

The controller is the operator of the One Click DPP website. Privacy requests may be submitted through the contact form. This notice applies to the public website only and does not cover software accounts, customer projects or Digital Product Passport records.

Information collected

When you send the contact form, we store your name, work email, company, country, product category and volume, optional message, language, page path and acknowledgement time. Privacy-minimal traffic measurement stores the page path, language, external referrer host and optional UTM campaign values. These website tables do not store raw IP addresses, user agents, fingerprints, user IDs, persistent session IDs or analytics cookies.

Purpose and legal basis

Contact details are used to answer your request and take requested pre-contractual steps. Aggregate traffic data is used to understand and improve the website based on legitimate interests. The website does not use advertising, profiling or marketing pixels, and traffic measurement is disabled when Global Privacy Control or Do Not Track is enabled.

Your rights

Contact requests are retained for up to 12 months and traffic records for up to 6 months, then deleted automatically. Supabase stores these website records in West EU (Ireland); hosting and security providers may also process technical request logs under their own retention controls. Subject to applicable law, you may request access, correction, deletion, restriction, objection or portability and may complain to your supervisory authority. Use the contact form for privacy requests. Resend processes the recipient address and email content solely to deliver the transactional confirmation message.