Privacy Policy

1. General

This policy applies to the brokerlauncher.com website and the services described on it. For the purposes of this document, "personal information" means any data that can directly or indirectly identify a person. BrokerLauncher acts as the data controller for information collected through this website.

2. Information we collect

We collect only what is necessary to provide our services or respond to your request:

• Form information: name, email, phone, country, requested service, and your message (submitted via the Get Consultation or Download Guide forms).
• Limited technical data: client IP address and browser User-Agent, kept only as a hashed value in security logs to prevent abuse and automated attacks.
• First-party cookie data for language preferences and display states (no cross-site tracking).
• Interaction data from Cloudflare Turnstile (see section 5) used to distinguish bots from real users.

3. How we use information

Collected data is used only for the following purposes:

• Responding to consultation requests and delivering the guide files you ask for.
• Sending transactional email related to your request (submission confirmation, guide link delivery).
• Aggregate analytics and site optimisation, without identifying individual visitors.
• Meeting legal obligations and defending against fraud or unauthorised activity.

4. Cookies

We use a small set of first-party cookies:

• NEXT_LOCALE: stores your chosen language (one year).
• bl_guide_submitted / bl_guide_seen: controls when the guide popup is shown so it is not repeated (30 days to one year).
• We do not set third-party cookies for advertising or cross-site tracking.

5. Cloudflare Turnstile

This site is protected by Cloudflare Turnstile to prevent spam and abuse. Cloudflare may collect hardware and interaction data as part of its security verification process. For more information, please review Cloudflare's Privacy Policy.

6. Third-party services

In addition to Cloudflare, we use the following third-party providers, each processing only the data needed to deliver its part of the service:

• Email service provider for transactional emails and confirmations.
• Supabase as the hosted database for secure storage of form submissions.
• Hosting infrastructure provider that runs the website itself.

7. Sharing and international transfers

We do not sell or rent your personal information. Data is shared only with the providers listed in section 6, and only to the extent necessary to deliver the service you requested. Those providers may operate infrastructure in jurisdictions outside your country of residence; in such cases we rely on each provider's standard contractual safeguards for data protection. We may disclose information when required to do so by a binding legal order from a competent authority.

8. External links

Pages on this site may link to third-party websites such as LinkedIn, X (Twitter), partner platforms or payment-provider documentation. We are not responsible for the content, policies or data practices of those external sites. Please review each external site's privacy policy separately before submitting any information there.

9. Security

All traffic to and from the site is encrypted with HTTPS/TLS. Server credentials (database keys, SMTP passwords, API secrets) are kept in environment variables and never reach the browser. Form submissions are protected by Cloudflare Turnstile, per-IP rate limiting, honeypot fields and additional anti-abuse layers. The database enforces row-level security and the service-role key is restricted to the server only. While we apply current best practices, no online transmission can be guaranteed 100% secure.

10. Data retention

Form data is kept for as long as needed to respond, follow up, or meet legal obligations. Security logs containing the hashed IP are kept for up to 90 days. Upon a verified deletion request we remove the data as soon as reasonably possible and in line with applicable legal requirements.

11. Your rights

Regarding your personal data, you have the right to:

• Request access, correction or deletion of stored data.
• Unsubscribe from notification emails at any time.
• Restrict processing or request data portability where GDPR or comparable laws apply.
• Lodge a complaint with the competent supervisory authority in your jurisdiction.

12. Children's privacy

This website and the services described on it are intended for businesses and adult professionals. We do not knowingly collect personal information from anyone under the age of 18. If you are a parent or guardian and become aware that a minor has provided us with data, contact [email protected] and we will delete it.

13. Contact us

For any privacy-related question, request or complaint, email [email protected]. We aim to respond as soon as reasonably possible.

14. Updates to this policy

We may update this policy to reflect legal, technical or operational changes. The last-updated date is shown at the top of the page; we recommend reviewing this page periodically.