Legal

Privacy policy

Last updated: October 17, 2026

1. Who we are

pushmoreads is operated by Elias Roitinger (sole proprietorship), Niederndorf 7, 4675 Weibern, Austria (“we”, “us”). We are the controller for the personal data described in this policy. You can reach us athello@pushmoreads.com.

This policy covers both this website and the pushmoreads application. It is written to meet the EU General Data Protection Regulation (GDPR) and, because we serve customers worldwide, it also explains your rights under other privacy laws such as the UK GDPR, the Swiss FADP, and US state privacy laws including the California Consumer Privacy Act (CCPA/CPRA).

2. Data we process on the website

  • Server logs. IP address, timestamps, and requested pages, kept briefly for security and debugging (legitimate interest, Art. 6(1)(f) GDPR).
  • Audience measurement. To see which pages are read, we run Rybbit, open-source analytics we host ourselves on our own EU servers (legitimate interest, Art. 6(1)(f) GDPR). It sets no cookies, stores no IP address, builds no cross-site profile, and sends nothing to a third party — we only see aggregate counts such as page, referrer, country, and device type. The script stores one random ID in your browser’s local storage so repeat visits are not counted twice; it identifies no one and is never combined with your account. To find pages that confuse visitors, it may also record how a visit moves through the page (scrolling, clicks) as a session replay; anything typed into a form is masked in your browser before it is sent.
  • Web analytics (Google Analytics). With your consent (Art. 6(1)(a) GDPR), we use Google Analytics 4 to understand how visitors find and use this website, for example which pages and campaigns bring visitors. Google Analytics sets cookies (such as _ga) and processes usage data (pages visited, device and browser information, approximate location, referrer) on our behalf as a processor. The provider is Google Ireland Ltd., which may transfer data to the United States. Google Analytics 4 does not store IP addresses.
  • Advertising and measurement. We advertise pushmoreads through Google Ads and Meta (Facebook/Instagram) Ads. With your consent (Art. 6(1)(a) GDPR), this website uses the Google Ads tag and the Meta Pixel to measure which ads lead to visits and sign-ups and to build audiences for our own campaigns. These tools set cookies or similar identifiers and share data (such as your IP address, browser information, pages visited, and ad-click identifiers) with Google Ireland Ltd. and Meta Platforms Ireland Ltd., who may transfer it to the United States. For pixel data collected on this site, we and Meta act as joint controllers under Meta’s Controller Addendum. If you then create a pushmoreads account, the app (my.pushmoreads.com) reports that sign-up to Google Ads once, together with the ad-click identifier and your email address, which your browser turns into an irreversible SHA-256 hash before sending (Google “enhanced conversions”). Your cookie choice is stored in a cookie (pushmoreads_consent) shared with the app, so it follows the same choice.

In regions where consent is required (EU/EEA, UK, Switzerland, and others), analytics and advertising cookies are set only after you accept them in our consent banner. You can decline or withdraw consent at any time via the cookie settings link in the footer, and browsing the site works fully without them. You can additionally opt out viaGoogle Ads Settings,Meta Ad Preferences, and the Google Analytics opt-out browser add-on. We honor Global Privacy Control (GPC) signals where legally required.

3. Data we process in the app

  • Account data. Your name, Facebook user ID and email address when you sign up or log in with Facebook (if Facebook does not share an email address, you enter one and confirm it with a code), plus a session cookie that keeps you logged in.
  • Meta integration data. When you connect your Facebook account we store your Facebook user ID, an access token, and the list of ad accounts, pages, pixels, and catalogs you grant us access to. We use this data solely to create and manage ads on your behalf through Meta’s Marketing API — never for our own advertising.
  • Content you upload. Creatives (images, videos), ad copy, and launch settings are stored on our servers so you can build and launch campaigns.
  • Cloud storage imports. Only if you connect Google Drive or choose files from Dropbox: an access token for Google Drive (removed when you disconnect) and the files you pick, which we download to prepare your ads.
  • Billing data. Subscriptions are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we store your Stripe customer ID, plan, and invoice history. Your billing address and VAT ID (if you enter one) are kept by Stripe for invoicing and tax; VAT IDs are checked against the EU VIES system.
  • Usage measurement. Which screens are opened and which key steps are completed in the app, measured with our self-hosted Rybbit (see section 2) and linked to your account ID so we can see where people get stuck, never to your ad copy, name or email address. Session replays mask everything you type. This rests on our legitimate interest in improving the product (Art. 6(1)(f) GDPR); write to us to object and we will exclude your account.
  • Emails. Email confirmation codes, getting-started tips, reminders before your trial ends and, as an existing customer, occasional offers for pushmoreads. Links carry a campaign tag so we can see which emails are useful; we do not track opens. Replies and bounce notices pause or stop these emails, and every non-essential email has an unsubscribe link. Tips and offers rest on our legitimate interest in direct marketing to existing customers (Art. 6(1)(f) GDPR, § 174(4) Austrian TKG 2021).
  • Support communication. Messages you send us, so we can respond and improve the service.

4. Why we process it (legal bases)

We process your data to perform our contract with you (Art. 6(1)(b) GDPR), to comply with legal obligations such as bookkeeping (Art. 6(1)(c)), on the basis of our legitimate interest in keeping the service secure and reliable (Art. 6(1)(f)), and — for analytics and advertising cookies and optional integrations such as connecting Google Drive to import creatives — on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time with effect for the future.

5. Who receives your data

  • Meta Platforms — Marketing API (to create and manage the campaigns you launch) and Meta Pixel (our website advertising, with consent).
  • Google — Google Analytics and Google Ads measurement on the website and the one-time sign-up report from the app (with consent), and Google Drive only if you connect it to import files.
  • Stripe — payment processing and invoicing.
  • Dropbox — only if you choose files from it.
  • Hetzner Online GmbH (Germany/Finland, EU) — hosting of our servers and email.
  • No one, for Rybbit audience measurement — our Rybbit instance runs on our own servers; those numbers are not shared.

We never sell your personal data.

6. International data transfers

Where providers process data outside the EU/EEA — in particular Meta, Google, Dropbox, and Stripe in the United States — transfers are protected by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, with equivalent safeguards for UK and Swiss data. If you use pushmoreads from outside the EU, your data is processed on our EU servers under the safeguards described here.

7. How long we keep it

Account and content data are kept while your account exists and deleted when you close it, except where retention is legally required (e.g. invoices under Austrian tax law, 7 years). Meta access tokens expire and are refreshed or removed when you disconnect your Facebook account. Server logs are deleted after a short period. Google Analytics data is kept for the retention period set in our Google Analytics account (at most 14 months). Advertising cookie data is retained according to Google’s and Meta’s published retention periods and the lifetimes shown in our consent banner.

8. Cookies

The app sets a single essential session cookie to keep you logged in. It has no cookie banner of its own and follows your choice on this website: only if you accepted advertising cookies does it load Google’s tag once to report your sign-up, which reads and may set Google’s advertising cookies (such as _gcl_aw and _gcl_au). The marketing website sets analytics and advertising cookies (Google Analytics, Google Ads, Meta Pixel) only with your consent, as described in section 2.

9. Your rights under the GDPR

You can request access to, rectification, erasure, or portability of your data, restrict or object to processing (including objecting to processing based on legitimate interest), and withdraw consent at any time. Write tohello@pushmoreads.com and we will respond without undue delay, at the latest within one month. You can also lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at) or your local supervisory authority.

Deleting your account and data: in the app, openSettings → Delete account & data — deletion is immediate and includes your creatives, settings, Meta access tokens and billing references. Alternatively, remove pushmoreads in your Facebook settings (Settings & Privacy → Business Integrations) and request data deletion there, or emailhello@pushmoreads.com with the subject “Delete my data”.

10. Your rights in other regions

  • United States (California and other states). You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising. Declining or withdrawing cookie consent (or sending a GPC signal) opts you out of such sharing. We do not discriminate against you for exercising your rights.
  • UK and Switzerland. You have rights equivalent to the GDPR rights above; UK users may complain to the ICO, Swiss users to the FDPIC.
  • Everywhere else. We extend the access, correction, and deletion rights described above to all users, regardless of location.

11. Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and EU-based hosting. No system is perfectly secure; we will notify you and the competent authority of breaches where the law requires it.

12. Children

pushmoreads is a business tool and not directed at children. We do not knowingly collect data from anyone under 16; if you believe a child has provided us data, contact us and we will delete it.

13. Changes

We will update this policy when the service changes and note the date at the top. Material changes will be announced in the app.