Privacy Policy - Firecone

Last Updated: December 26, 2025

I. Data Controller & Contact Information

Firecone acts as the Data Controller for the personal data of its account holders and website visitors.

Entity: Firecone
Contact Email: [email protected]

Data Protection Contact: Privacy Lead
(Firecone has not appointed a statutory Data Protection Officer; inquiries may be directed to the email address above.)

II. Legal Bases for Processing

Firecone processes personal data only where a lawful basis exists under Article 6 of the EU General Data Protection Regulation (GDPR):

Contractual Necessity – to provide hosting services, manage user accounts, and process payments
Consent – for analytics, advertising, and marketing communications
Legitimate Interests – to ensure website and service security, prevent fraud, mitigate abuse, maintain service reliability, and improve infrastructure
Legal Obligation – to comply with applicable tax, accounting, and law enforcement requirements

Where processing is based on legitimate interests, Firecone ensures that such interests are balanced against users’ fundamental rights and freedoms through data minimization, limited retention periods, and restricted access controls.

III. Personal Data We Collect & Purposes

Data Category	Purpose	Legal Basis	Third-Party Processors
Account Information (name, email)	Account creation, service delivery, customer support	Contract	Internal systems
Payment Information	Payment processing	Contract	PayPal
Network & Log Data (IP address, timestamps)	Security, abuse prevention, DDoS mitigation	Legitimate Interests	Cloudflare
Usage & Analytics Data	Service optimization and analytics	Consent	Google Analytics
Advertising Data (IP, device, browser)	Funding the 24-hour free trial	Consent	MoneyTag

IV. Advertising & Monetization (MoneyTag)

To fund our 24-hour free trial, Firecone uses MoneyTag to serve advertisements.

Data Processed

IP address
Device type
Browser information

Purpose

Advertising delivery
Trial monetization

Role of MoneyTag

MoneyTag acts as an independent data controller for advertising data processed through its platform. Firecone does not control or determine how MoneyTag processes such data.

For further information, users should consult MoneyTag’s own privacy policy. Firecone is not responsible for the data processing activities conducted by MoneyTag.

Opt-Out Options

You may withdraw consent for advertising at any time via:

MoneyTag’s opt-out mechanisms
Your browser or device privacy settings

V. Cookies & Tracking Technologies

Firecone uses cookies and similar technologies.

Strictly necessary cookies are used to ensure website functionality and security.
Non-essential cookies, including analytics and advertising cookies, are only set after the user has provided explicit consent via our consent management platform.

Detailed information about the cookies used, their purposes, retention periods, and consent management options is provided in our Cookie Policy, which forms an integral part of this Privacy Policy.

Users may withdraw or modify cookie consent at any time through the cookie settings interface.

VI. International Data Transfers

Firecone is established in Europe. Some service providers (such as Google and PayPal) may process personal data outside the EU/EEA, including in the United States.

Where international data transfers occur, Firecone ensures appropriate safeguards, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Participation in the EU–U.S. Data Privacy Framework, where applicable

VII. Your Data Protection Rights

If you are located in the EU/EEA, you have the following rights:

Right of Access
Right to Rectification
Right to Erasure
Right to Restriction of Processing
Right to Data Portability
Right to Object
Right to Withdraw Consent at any time

To exercise your rights, contact [email protected].

Firecone may request additional information strictly limited to what is necessary to verify your identity. Requests will be handled within 30 days, unless extended as permitted by law.

VIII. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority.

Lead Supervisory Authority:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Czech Republic

IX. Data Retention

Firecone retains personal data only for as long as necessary for the purposes for which it was collected:

Account Data: retained while the account remains active
Financial Records: retained for 7–10 years in accordance with EU tax and accounting laws
Marketing Data: retained until consent is withdrawn or the user unsubscribes
Server Logs: deleted or anonymized after 30–90 days

Backups containing personal data are retained for limited periods and are securely deleted according to internal retention schedules.

X. Security & Breach Notification

Firecone implements appropriate technical and organizational security measures, including:

TLS encryption for data in transit
Access controls and least-privilege policies
Infrastructure and network protection measures

In the event of a personal data breach posing a risk to individuals, Firecone will:

Notify the relevant supervisory authority within 72 hours
Notify affected users without undue delay, where required by law

XI. Hosting Services & Data Processing Roles

For personal data uploaded or processed through Firecone’s hosting services:

You act as the Data Controller
Firecone acts as the Data Processor

A Data Processing Agreement (DPA) forms part of Firecone’s Terms of Service and is available upon request.

XII. Automated Decision-Making

Firecone does not engage in automated decision-making or profiling that produces legal or similarly significant effects on users within the meaning of Article 22 GDPR.

XIII. Children’s Data

Firecone’s services are not intended for children under the age of 18. Firecone does not knowingly collect personal data from minors. If such data is identified, it will be deleted without undue delay.

XIV. Changes to This Policy

Firecone may update this Privacy Policy from time to time. Material changes will be communicated via our website or email where legally required. The “Last Updated” date reflects the most recent revision.