Privacy Policy

Thank you for visiting WhatRuns.com ("Site").

Your privacy and trust are important to us. This Privacy Policy explains how WhatRuns ("we", "our", "us") collects, uses, stores, and protects information when you visit our website, install our browser extension, or use any related services (collectively, the "Services").

By accessing or using the Services, you agree to the collection and processing of information as described below. If you do not agree with this policy, please discontinue using the Services.

1. Information We Collect

We collect both personal and non-personal data to provide our Services effectively, enhance product reliability, and meet legal obligations.

a. Information You Provide to Us

When you interact directly with WhatRuns, you may voluntarily provide:

• Identification and contact details: such as your full name, company name, and email address when you create an account, subscribe, or contact support.
• Account credentials: username, password, and authentication details required for secure access.
• Communications: content from forms, emails, or messages exchanged with our support team or feedback channels.

This information enables us to deliver requested services, communicate effectively, and provide assistance when needed.

b. Information Collected Automatically

We automatically collect limited technical and behavioural data to maintain and improve our Services. This may include:

• Technical metadata: browser type, operating system and referring URLs.
• Usage analytics: pages viewed, time spent, navigation paths, and interaction logs.
• Performance logs: system events, errors, and diagnostic data used to ensure reliability and security.

This data helps us analyse traffic, understand user behaviour, and improve product stability.

c. Data Collected Through the WhatRuns Extension

The WhatRuns browser extension analyses publicly available information from websites you visit to identify the technologies they use.
To perform this functionality and improve detection accuracy, the extension may collect:

• Source code snippets and public resources (e.g., scripts, metadata, or stylesheets) solely to identify technologies.
• Timestamps and diagnostic information for debugging and performance tuning.
• A randomly generated identifier to differentiate anonymous extension sessions.
• Aggregated interaction data generated through the use of AI-powered or automated features, which may be analysed to enhance accuracy, performance, and reliability across the WhatRuns Services.

This information is never linked to identifiable users or personal browsing histories. All collected data is anonymised and aggregated before any analysis or sharing.

2. How We Use Information

We process collected information only for legitimate and clearly defined purposes, including to:

1. Deliver and improve the Services – ensuring the extension and platform operate efficiently and accurately.
2. Enhance product performance – using aggregated interaction data to refine detection algorithms and improve reliability.
3. Provide customer support – responding to inquiries, troubleshooting issues, and offering assistance.
4. Conduct analytics and research – generating insights that inform product improvements and innovation.
5. Ensure compliance and security – protecting our systems from abuse, fraud, or unauthorised access.
6. Meet legal obligations – complying with applicable laws or lawful data requests.

We do not sell, rent, or trade personally identifiable information.

3. Sharing and Disclosure of Information

We may share anonymised and aggregated data with trusted third parties who assist us in improving our products, conducting research, or analysing performance trends.
When we do so:

• All shared data is fully anonymised and cannot identify individual users or devices.
• Partners operate under confidentiality and GDPR-compliant data processing agreements.
• Data is used solely for legitimate analytical, research, or service improvement purposes.

We may also disclose limited information:

• To service providers offering cloud, analytics, or infrastructure support.
• To law enforcement or regulators, where legally required.

We never sell or monetise identifiable user data.

4. Cookies, Analytics, and Tracking Technologies

Cookies and similar technologies help us recognise returning users, store preferences, and analyse visitor behaviour.
You can manage or delete cookies through your browser settings. Disabling cookies may limit certain functionalities.

Google Analytics

Our Site uses Google Analytics to measure visitor engagement and traffic patterns. This tool may collect anonymised data such as IP addresses, device types, and session duration. Google processes such information under its own privacy policy, which can be reviewed at https://policies.google.com/privacy.

You may opt out of analytics tracking using the Google Analytics Opt-Out Browser Add-on.

5. Data Retention and Lawful Basis

We retain data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Once data is no longer needed, it is securely deleted or anonymised so that it can no longer identify any individual.

Account and registration information is retained while your account remains active and for a reasonable period thereafter to maintain records and ensure service continuity.

Communication and support records may be kept for up to 24 months to review past requests, improve service quality, and provide consistent support.

Aggregated and anonymised data, including data generated through AI-powered features, may be retained indefinitely as it does not identify individuals and is used solely for research and product improvement purposes.

Marketing and subscription preferences are retained only while you remain subscribed or until you withdraw consent. You may opt out of communications at any time.

We process personal data based on the following lawful bases under GDPR:

• Performance of a contract, when processing is required to deliver our Services.
• Legitimate interests, when processing supports product improvement, performance, or security.
• Consent, when you have explicitly agreed to communications or analytics.
• Legal obligations, when processing is necessary to comply with applicable law.

All data is handled with care and transparency, in accordance with GDPR principles of lawfulness, fairness, purpose limitation, and data minimisation.

6. Your Rights

Under GDPR and similar privacy laws, you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of inaccurate information.
• Restrict or object to specific types of processing.
• Withdraw consent for marketing communications.
• Request data portability where applicable.

To exercise these rights, please contact us at hello [at] whatruns.com.
If you are interacting with one of our customers (as the data controller), please contact them directly. Upon receiving a verified request from that customer, we will act within 30 days.

7. Data Security

We take security seriously and employ measures to protect your information, including:

• SSL/TLS encryption for data transmission.
• Access controls and secure authentication for authorised personnel.
• Regular monitoring and vulnerability assessments.

While no system can guarantee complete security, WhatRuns continuously reviews and strengthens its protective measures.

8. International Data Transfers

Your data may be processed and stored outside your country of residence.
When such transfers occur, WhatRuns ensures adequate safeguards are in place, including Standard Contractual Clauses and adherence to recognised data protection frameworks such as the EU-U.S. Privacy Shield Principles.

9. Children's Privacy

Our Services are intended for a general audience and are not directed to children under 13 years of age.
We do not knowingly collect or store personal data from children. If such data is inadvertently collected, it will be deleted promptly.

10. Do Not Track

We treat all visitors consistently with this Privacy Policy, regardless of any "Do Not Track" settings.
We do not engage in cross-site tracking or behavioural profiling.

11. Updates to This Policy

We may revise this Privacy Policy periodically to reflect new features, technologies, or regulatory requirements.
Updated versions will be posted on this page with an updated "Last updated" date. Material changes will be clearly communicated. Continued use of the Services after such updates constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or privacy-related requests, please contact us:

Email: hello [at] whatruns.com

We are committed to addressing all privacy matters transparently and promptly.

Last updated: August 2025