Privacy Policy

Last updated: 30 September 2026. Data controller: Fleden — contact page.

Fleden (fleden.com) publishes researched business ideas. This page explains in plain English what we collect, why we collect it, and how to have it deleted.

What we collect

Account: your email address, a password (stored hashed by our authentication provider) or your Google sign-in, the country group used for pricing (detected from the country of your IP when you sign up, then fixed), your assigned price variant and, if you subscribe, your Stripe customer ID and subscription status.

Activity: the ideas you save, and anonymous price-view events (a random key, country group, variant and page) used to count how many people see each price.

Payments: processed by Stripe — card details never touch our servers. We keep the subscription record (plan, price, currency, status, renewal date) and Stripe keeps the invoices for as long as tax rules require.

Attribution: if you arrive through one of our tracking links, we save which link brought you (cookie fleden_attrib, 60 days) and attach it to your account when you sign up.

Technical data: IP address and browser details, processed by our hosting provider to deliver and protect the site (your IP country picks the right price group).

Cookies

fleden_at keeps you signed in (1 hour, renewed while you browse). fleden_group remembers your price group (1 year). fleden_variant remembers the price version you see (1 year). fleden_uid is a random key that counts anonymous price views (1 year). fleden_attrib remembers the link that brought you (60 days).

Analytics and advertising cookies are loaded through Google Tag Manager: Google Analytics 4 and, while campaigns are running, advertising pixels (for example Google Ads, Meta, TikTok, X or Reddit). For signed-in users we also send those tools a SHA-256 hash of the email — never the raw address — so visits can be matched to accounts, and only while campaigns are active.

Why we process it, and for how long

Account, saved ideas and subscription data are processed to provide the service (contract). Security and aggregate metrics rely on our legitimate interest. Advertising pixels rely on consent where the law requires it. Account data is kept while your account exists, invoices for the period tax law requires, and metrics in aggregate form. Ask us and we delete anything we are not legally required to keep.

Who else sees your data

Only our providers, under contract: Cloudflare (hosting and delivery), Supabase (database and authentication, United States), Stripe (payments and tax) and Google (Tag Manager, Analytics and advertising). We never sell personal data.

Your rights

You can ask for access, correction, deletion, portability or restriction of your data, object to processing or withdraw consent at any time through the contact page. If you are in the EU or the UK you can also complain to your data protection authority (in Spain, the AEPD).

Changes

We will update this page and its date whenever something changes. It is written in English; any translation is for convenience only.