Privacy & Cookie Policy
This policy explains what personal data the Conductor marketing site collects, why, who processes it, how long we keep it, and the rights you have. It covers this website only.
1. Who we are (data controller)
The data controller is Monstrous Media. Our contact details for privacy matters — and to exercise your rights — are privacy@monstrous.media.
2. What we collect, why, and the legal basis
- Analytics & product usage (consent-based, Art 6(1)(a)) — pseudonymous usage events (identified by a random device identifier, never your name or email) and, if enabled, session replays with all inputs masked. We use this only to understand which site design converts better and to monitor performance. Nothing is collected until you press Accept on the consent banner, and you can withdraw at any time (see §5).
- Early-access application (Art 6(1)(b), pre-contract steps at your request) — the name, email address, and the preferences you submit on the early-access form, so we can manage the waitlist and contact you about early access.
We do not sell your data, and we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
3. Who processes your data (recipients)
We use the following processors, each under a data-processing agreement (DPA):
- Vercel — website hosting and content delivery.
- Upstash — stores early-access applications (Redis/KV).
- Resend — sends the internal notification email for a new application.
- PostHog (EU region) — consent-gated product analytics and session replay.
4. How long we keep it
- Early-access applications are retained for 6 months and then automatically purged, unless you ask us to erase them sooner.
- Analytics data is retained for up to 12 months; it is pseudonymous and contains no directly identifying information.
5. Your rights & how to exercise them
Under the GDPR you have the right of access, rectification, erasure, restriction, data portability, and to object. To exercise any of these, email privacy@monstrous.media and we will respond within one month.
You can withdraw analytics consent at any time using the “Analytics settings” control in the site footer — declining there stops all analytics capture and session replay and clears the associated storage. You may also lodge a complaint with your local data-protection authority.
6. International transfers
Our processors are configured to host data in the European Union. Where any transfer of personal data outside the EU/EEA occurs, it is covered by the processor's data-processing agreement and Standard Contractual Clauses (SCCs) or an equivalent safeguard.
7. Cookies & local storage
- Consent record (local storage,
conductor-analytics-consent) — remembers your analytics choice and the policy version it was made against. Always present once you make a choice; strictly functional. - Design assignment (functional cookie) — records which A/B design you were shown so your experience stays consistent between pages.
- PostHog cookies — set only after you accept analytics, to measure usage. Removed/opted-out when you withdraw consent.
8. Changes to this policy
If we make a material change we will update the version above. When the policy version changes, we ask you to review your analytics choice again.
9. Contact
Questions or requests: privacy@monstrous.media. Our Terms of Service cover use of the site and the early-access programme.