Privacy Policy

Last updated: 30 October 2026

In short

We measure our website, not you. Nothing tracks you before you agree. The one time you give us personal data is when you contact us, and we use it only to reply. We never sell or rent anything about you to anyone.

Who we are

Kiss My Button, a software development company at Ethnikis Antistaseos 33A, Thessaloniki, Greece, is the data controller for this website, kissmybutton.gr. For anything in this policy, write to contact@kissmybutton.gr.

Visiting the site

The site is static files served by Cloudflare. Like every web server, Cloudflare's network records technical logs of each request: IP address, browser identity, the page requested, and the time. We use these logs to keep the site secure and to tell people from bots; Cloudflare retains this request data for about a month. We also use Cloudflare Web Analytics, which is cookieless and gives us only aggregate counts, never profiles. Our legal basis for this is our legitimate interest in operating and securing the website and keeping its statistics honest.

Analytics, only with your consent

When you first visit, a banner asks "Can we count your visit?". Google Analytics loads only if you choose "Yes, count me". It then records the pages you view, where you came from, your city (approximated from your connection), and your device and browser. Its cookies recognize return visits, not who you are. If you choose "No thanks" or make no choice, nothing loads and nothing is counted.

Analytics data is kept for 14 months. Google processes it on our behalf and may do so on servers in the United States under the EU–U.S. Data Privacy Framework; Google's own privacy policy is at policies.google.com/privacy. We use no advertising features and no cross-site tracking, and Google Signals is off. The legal basis is your consent, which you can withdraw at any time: change your choice here.

Contacting us

The contact form asks for your name, email address and message. It is delivered to our inbox through Postmark, an email delivery service that processes the message in order to send it and keeps it in its activity log for 45 days (their privacy policy: postmarkapp.com/privacy-policy). We also email you a confirmation, so you know your message arrived; it contains no tracking pixels. To stop spam robots, Cloudflare Turnstile quietly checks technical properties of your browser when you send the form; it sets no cookies and does not track you (how Cloudflare handles this: Turnstile Privacy Addendum). To send you a useful confirmation, the text of your message and the domain of your email address — never your name or the address itself — are processed by Anthropic's Claude, an AI service that only labels what the message is about so we can point you to relevant work; Anthropic does not use this data to train its models (their privacy policy: anthropic.com/legal/privacy). We use what you send only to answer you, keep it only as long as our conversation and ordinary business records require, and never add you to a mailing list. The legal basis is taking steps at your request before a possible contract.

Email and phone links open your own apps. Booking a call takes you to a Google booking page (calendar.app.google), where Google's terms apply.

Telling people from bots

Most requests to any small website come from robots, and counting them as people would make our statistics meaningless. To keep the count honest, the site checks a few technical properties of the browser that only automation exhibits (for example the standard navigator.webdriver flag); when a browser is automated, analytics simply does not load. The cookie banner also carries a small option for automated visitors, "I'm not a human": choosing it means the visit is not counted, and it sends one anonymous signal describing only how the click happened (mouse, touch, or script, and whether the page was zoomed), with no cookie and no identifier. These checks describe the browser, never you, and no visitor is ever blocked or challenged. The legal basis is our legitimate interest in accurate measurement and security.

Cookies, the complete list

Until you make a choice in the banner, the site sets no cookies at all. If you choose, it sets kmb_cookie_consent, which remembers your answer for one year. If your answer was yes, Google Analytics sets its _ga cookies (kept for up to two years) to recognize return visits. That is the complete list. Change your mind any time here.

Who we share data with

Only the processors named above—Cloudflare (hosting, security and the Turnstile spam check), Google (analytics, after your consent), Postmark (contact form delivery), and Anthropic (labeling what a contact form message is about)—and public authorities where the law requires it. No one else, and never for money.

Your rights

You can ask us for access to the data we hold about you, correction, deletion, restriction, a portable copy, or object to processing based on legitimate interest, and you can withdraw consent at any time. Write to contact@kissmybutton.gr and we will answer within a month, usually much faster. If you are unhappy with our answer, you can complain to the Hellenic Data Protection Authority (dpa.gr).

Changes to this policy

When what the site does changes, this page and the date at its top change with it, and if the change affects what is collected with your consent, the consent banner is updated too and asks again.