Privacy Policy
Last updated: 29 October 2026
This policy explains what personal data Damper collects about you, why, and what rights you have. It covers the website usedamper.com, the Damper app and our communication with you.
1. Who we are
Damper is provided by Studio 404 d.o.o., Gradišče 15C, 1360 Vrhnika, Slovenia, EU, company registration no. 6835228000, VAT ID SI42531357. We are the controller for the personal data described in this policy. Contact: [email protected].
If you are a customer's user. When a company uses Damper to collect feedback, run a status page or send updates, the company is the controller of that data and we process it on its behalf under our Data Processing Addendum. This includes feedback you send through a Damper widget, votes and comments on a public board, and subscriptions to a changelog or status page. Please contact that company about your data; if you contact us, we will forward your request to them.
2. Data we collect
Account data. Your name, email address, password (stored only as a hash), your account and team, your role, language and time zone. If you add a phone number, we store it and whether it is verified, and whether you turned on phone-call alerts. If you turn on two-factor authentication, we store its secret in encrypted form and your recovery codes as hashes, and we log two-factor events (such as sign-ins with a code) with the IP address and browser.
Billing data. Your plan, payments (amount, currency, date) and the billing email address. Card payments are handled by Stripe; we never see your card details.
Content you create. Projects, roadmap items, changelogs, pages, comments and settings you create in Damper.
Technical data. Our servers process your IP address and browser details to deliver the service and to protect it, for example in short-lived rate-limit counters. If something fails, an error report is sent to our error-monitoring provider (Sentry); it identifies you only by your user ID and contains no request bodies, headers or cookies.
Analytics data. We measure how usedamper.com and the Damper app are used with PostHog, hosted in the EU (Frankfurt). The requests go to our own address (usedamper.com/ingest, app.usedamper.com/ingest), which forwards them to PostHog.
- Without your consent (and after "Reject all"). Nothing is stored on your device. To count daily visitors, PostHog's servers combine your IP address and browser details with a secret that changes every day and keep only the result, a daily-changing identifier. Your IP address is not stored. For each page view we record the page address and title, the domain of the website that referred you, campaign tags, whether the link carried an ad click identifier (not the identifier itself), your browser, operating system, device type, screen size, language and time zone. When you leave the page, we also record how long you stayed and how far you scrolled. This applies to our website and to the sign-in and sign-up pages. Because the identifier changes every day, we can't link your visits across days, and we never link it to your name, email address or Damper account. We use these counts only as statistics about how the site is used.
- With your consent. A random identifier is kept in your browser, so we can recognise repeat visits, and in the app it is linked to your Damper user ID after you sign in (see section 3).
You can object to this counting at any time by writing to [email protected]. If your browser sends a Global Privacy Control or Do Not Track signal, we don't count your visits at all.
In both cases we record the page address without its query string (campaign tags excepted), the referring website's domain, your browser language, and basic browser and device details. Your IP address is never stored. If you allowed analytics, PostHog first uses it to look up your approximate location (country, region, city and time zone, with the approximate coordinates of that area) and keeps only that. Links that contain access tokens (shared pages, invitations) are recorded with the token removed. Ad click identifiers are never sent to PostHog: we only record that one was present.
When you sign up we record how you found us: the referring website's domain, and, if you allowed analytics, the campaign tags (UTM parameters) from the page you arrived on. If you also allowed advertising cookies, we record the Google Ads click identifiers (gclid, gbraid, wbraid) if you came from an ad. We keep this with your account, and send PostHog the campaign tags and referring domain, plus only the fact that a click identifier was present. We also record, without content, when your account first connects an AI agent and when a payment completes (plan, amount, currency), so we can understand activation and revenue. These events are linked to your user ID and account ID, never to your name or email address.
We keep analytics events for up to 7 years.
Support. When you open the support chat in the app (HAL, our own support product), it is given your name, email address, user ID and account ID so we know who we are talking to. We keep the messages you send us there or by email.
3. Cookies and similar storage
We use a small number of cookies and browser storage entries. Some are strictly necessary for the site and app to work. The others are optional, and we use them only if you allow them.
Your choice. The first time you visit usedamper.com you can choose "Accept all", "Reject all" or "Choose" to pick categories. "Reject all" is as easy as "Accept all", and rejecting does not limit any feature. We keep your choice for 12 months. You can change it at any time with "Cookie settings" in the footer of usedamper.com. Withdrawing your consent deletes the optional entries from your browser. Until you choose, we use no optional cookies or storage. We count visits without storing anything on your device (see "Analytics data" in section 2).
Strictly necessary (always on)
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
damper_session | Cookie (HttpOnly, Secure) | Damper (api.usedamper.com) | Keeps you signed in to the Damper app. | 7 days, or until you sign out |
damper_consent | Cookie (on .usedamper.com) | Damper | Remembers your cookie choice, for the website and the app. | 12 months |
sidebar_state | Cookie | Damper (app.usedamper.com) | Remembers whether you collapsed the app's sidebar. | 7 days |
damper_authenticated | Local storage | Damper (app) | Tells the app you are signed in (holds no credentials; the session itself is the damper_session cookie). | Until you sign out |
damper-auth-notice | Session storage | Damper (app) | Carries a one-time notice to the sign-in page after your session ends. | Until it is shown, or the tab is closed |
damper-language, damper-theme, damper-current-project, damper-recent-pages, damper.recentIcons, damper.logs.saved-filters, damper.pagesSidebar.collapsed.*, damper-roadmap-view-mode, damper-roadmap-timeline-scale | Local storage | Damper (app) | Your settings in the app: language, theme, the project you last opened, recently opened pages and icons, saved log filters, and how you last viewed the Pages tree and the roadmap. | Until you clear them or change the setting |
damper:lazy-chunk-reload:v1, damper:error-boundary-asset-reload:v1 | Session storage | Damper (app) | Reloads the app once after an update, so you don't see an outdated version. | Until the tab is closed |
hal_visitor_<id>, hal_session_id, hal_ai_disclosure_dismissed, hal_ai_opt_out | Local storage, session storage | HAL, our own support chat (Studio 404 d.o.o.), loaded from api.chatwithhal.com | Keeps your support conversation linked to you once you open the chat. | hal_session_id until the tab is closed; the others until you clear them |
hal_widget_open_<appId> | Local storage | HAL (our support chat) | Remembers whether the chat panel is open. Set only after you open the chat. | Until you clear it |
Analytics (optional)
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
ph_<project>_posthog, __ph_opt_in_out_<project> | Local storage | PostHog (EU), via our own address usedamper.com/ingest | A random identifier, so we can recognise repeat visits on the website and in the app, and your analytics choice. In the app it is linked to your Damper user ID after you sign in. | Until you clear it, or until you withdraw analytics consent (we then delete it) |
ph_<project>_posthog, ph_<project>_window_id, ph_<project>_primary_window_exists, ph_<project>_session_registered_properties | Session storage | PostHog (EU) | Groups the pages you view in one visit into a session. | Until the tab is closed |
damper_signup_source | Session storage | Damper (website) | Carries how you found us (campaign tags and the referring website) from the page you arrived on to the sign-up form. | Until the tab is closed |
These entries are set only after you allow analytics. Without your consent, and after "Reject all", nothing is stored on your device (see "Analytics data" in section 2).
On our customers' websites
The Damper feedback widget and public feedback and roadmap boards run on our customers' sites and pages. They store a visitor identifier and, for boards, a sign-in token in local storage (damper_visitor_id_*, damper_user_*, damper_board_visitor_*, damper_board_token_*, damper_roadmap_visitor_*). Our customer is responsible for these as the controller (see our Data Processing Addendum).
4. Why we use your data, and our legal basis
- To provide Damper (your account, the features you use, sign-in security, emails about your account and your projects, phone verification and call alerts you turn on, support): performance of our contract with you (Art. 6(1)(b) GDPR).
- To take payments and keep accounting records: contract, and our legal obligations under tax and accounting law (Art. 6(1)(b) and (c)).
- To keep Damper secure and working (rate limits, abuse prevention, error monitoring, backups): our legitimate interest in a secure, reliable service (Art. 6(1)(f)).
- Counting visits without storing anything on your device: our legitimate interest in understanding how our website and product are used (Art. 6(1)(f) GDPR), limited to statistics. You can object at any time (see section 2).
- Analytics identifier in your browser and linking it to your account: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in "Cookie settings".
- Advertising cookies and conversion data: your consent (Art. 6(1)(a) GDPR), only when we run ads.
- Recording, when you sign up, the referring website and (if you allowed analytics) the campaign tags, and recording activation and payment events with your user and account ID: our legitimate interest in understanding which channels bring customers and how Damper is used (Art. 6(1)(f) GDPR). You can object at any time by writing to [email protected].
We do not sell your data and do not use it for advertising profiles.
5. Who receives your data
We use service providers for hosting, email, payments, analytics, error monitoring, phone verification, AI features and support. Analytics go to PostHog (EU), reached through our own address usedamper.com/ingest. Each one, with the data it receives and where it is located, is listed on our sub-processors page. We share data with authorities only where the law requires it.
6. International transfers
Our database, files and backups are stored in the EU (Railway, Netherlands), and our email is sent from the EU (Amazon SES, Frankfurt). Some providers process data in the United States: Sentry (error reports), OpenAI and Anthropic (AI features), Twilio (phone verification and call alerts), GitHub (the backup job), Stripe and Cloudflare. These transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
7. How long we keep data
- Account data and content: as long as your account exists. When the account owner deletes the account, it can be restored by signing in within 30 days; after that it is deleted. Backups are deleted after a further 30 days.
- Sign-up source and the activation and payment dates: as long as your account exists.
- PostHog events: up to 7 years.
- Payment records: as long as tax and accounting law requires (in Slovenia, up to 10 years). Stripe keeps its own records as financial regulations require.
- Error reports: deleted automatically by Sentry at the end of its retention period.
- Rate-limit counters: minutes to hours.
- Support conversations: as long as we need them to help you, and deleted on request.
8. Your rights
You have the right to access your data, to correct it, to have it deleted, to restrict or object to its processing, and to receive it in a portable format. In the app, Settings → Account lets you edit your profile, download a copy of your account data (JSON) and delete your account. For anything else, write to [email protected]; we answer within one month. You can also complain to a supervisory authority, in Slovenia the Information Commissioner (Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si).
9. Security
We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, secure password hashing, and security reviews. Access to personal data is restricted to authorized personnel only. The measures are described in section 3 of the DPA.
10. Children
Damper is a service for businesses and is not intended for children under 16.
11. Changes
We update this policy when our service or providers change, and change the date at the top. We tell account owners by email before material changes take effect.