Privacy policy

BILPP OÜ, Kopli tn 25a, 10412 Tallinn, Estonia. Email: hello@bentap.com.

bentap.com runs on Cloudflare, Inc. (Workers, D1, R2, KV) with EU jurisdiction settings. Cloudflare processes connection data (IP address, user agent, requested URL) to deliver the site and protect it from abuse — our legitimate interest under Art. 6(1)(f) GDPR. Cloudflare is certified under the EU–US Data Privacy Framework.

To sign in we store your email address, sign-in codes (hashed, deleted after 2 days) and sessions (device name, daily-salted IP hash, dates). Legal basis: contract (Art. 6(1)(b)). Sessions expire after 30 days of inactivity.

Everything you enter (name, texts, links, images, business details, opening hours) is stored to display your page and is public when you publish it. Images are stored in Cloudflare R2. You control publication, search-engine indexing, and deletion.

When someone opens your page we record an event: type (view, click, tap, review start, contact save), country and city (from Cloudflare), device class, referrer host and the time. No cookies are set, no IP address is stored, and no visitor identity is derived. Raw events are deleted after 90 days; daily totals are kept for you.

Sign-in codes and account notices are sent through Cloudflare Email Service. We send no newsletters.

When you report a page we store the reason, your text and a daily-salted IP hash to prevent abuse.

Access, rectification, erasure, restriction, portability and objection — most of it self-service: Account → Download export / Delete account. Complaints go to the Estonian Data Protection Inspectorate (AKI) or your local authority.

Accounts are erased 30 days after you delete them, including images. Raw statistics after 90 days. Sign-in codes after 2 days.

Our forms are protected by Cloudflare Turnstile, which runs invisibly: there is no puzzle and nothing to click. It looks at signals from your browser to tell a person from an automated script, and returns a token that our server verifies. Cloudflare processes this data as our processor and, per its own terms, does not use it to build a profile of you or to serve advertising. Details are in the Cloudflare Turnstile Privacy Addendum. Without this check the forms would be open to automated abuse.