Privacy Policy

1. Introduction

Fortt Safety ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our DNS-based family safety service.

We are based in the European Union and built Fortt to meet Europe's strict privacy standards, including the EU General Data Protection Regulation (GDPR) and the EU ePrivacy rules on cookies. Privacy is the default here, not a setting you have to find: we collect as little as possible, never show ads, never build profiles, and never sell data.

2. Information We Collect

We collect minimal information necessary to provide our service:

• Account information: Email address and password (encrypted) when you create an account
• Profile information: Names of family members and selected protection levels (stored locally in your account)
• Technical data: We do NOT collect browsing history, DNS query logs, or any data about which websites you or your family visit

3. How We Use Your Information

Your information is used solely to: (1) authenticate your account, (2) store your family profiles and protection preferences, and (3) provide installation instructions for your selected devices. We do not sell, rent, or share your personal information with third parties for their own purposes. We rely on a small number of service providers that process data only on our behalf and under our instructions (see section 5).

5. Legal Basis and Where Your Data Lives

Under the GDPR we may only process personal data when there is a clear legal reason. Ours are:

• Your account and family profiles: needed to provide the service you signed up for (GDPR art. 6(1)(b)).
• Spam and abuse protection: our legitimate interest in keeping the service and its users safe (art. 6(1)(f)).
• Website analytics: only with your consent (art. 6(1)(a)), which you can withdraw at any time.

Our account database is hosted by Supabase in the European Union (Frankfurt, Germany). Our other providers are Vercel (website hosting), Cloudflare (spam protection) and Umami (analytics, only with consent). Where a provider may process data outside the European Economic Area, we rely on the safeguards the GDPR requires, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

6. Your Rights

Wherever you live, you have the full set of GDPR rights over your data:

• See the data we hold about you and get a copy (access and portability)
• Correct anything that is wrong (rectification)
• Have your account and data deleted (erasure)
• Limit or object to how we use your data (restriction and objection)
• Withdraw your consent at any time, as easily as you gave it

To use any of these rights, contact us through our contact page. We reply within one month and never charge for it. If you are not happy with our answer, you have the right to complain to the data protection authority in your country.

7. Children's Privacy

Fortt accounts are for parents and guardians. We do not knowingly collect personal data directly from children, and children should not create accounts themselves. The only information about a child we hold is what a parent chooses to add to their family profiles, and we keep that to a minimum. If you believe a child has given us personal data, contact us and we will delete it.

8. Data Security

We use industry-standard encryption for passwords and secure connections (HTTPS) for all data transmission. Your profile data is stored in a secure database with restricted access.

9. Contact Us

For privacy-related questions, please contact us at our contact page.