Privacy Notice

Controller

Legal name

MKP Digital

CVR

45731170

Address

Trygsvej 1.D, 8230 Åbyhøj, Denmark

Contact

kontakt@mkpdigital.dk

Scope

• This notice applies to https://www.sweepleague.com and the public product served from that domain.
• The site does not currently require user registration, sign-in, or payment to browse public content.
• ReviewBomb does not require user accounts or personal data for watchlists or push notifications.
• The main personal-data surfaces are browser preferences, security and diagnostics metadata, optional analytics after consent (Vercel and Google Analytics 4 with Consent Mode), and email correspondence if you contact us.

Purposes and legal bases

• We run the site, remember requested browser settings, and deliver watchlist features based on our legitimate interests and your request to use those functions.
• We deliver Web Push notifications only after you request them in the browser. The subscription is used solely to send review bomb and significant review-change alerts, not for advertising, profiling, or resale.
• We process limited security and operational data to defend the site, prevent abuse, investigate faults, and protect the service. The legal basis is legitimate interests and, where relevant, legal obligation.
• Google Analytics 4 runs with Consent Mode v2: the script loads on every visit with all storage defaults set to denied. If you accept, measurement switches to granted. If you reject or reset, it returns to denied. You can change this choice at any time through the cookie settings control in the footer.
• We load Vercel Web Analytics and Speed Insights only after consent. You can withdraw that consent at any time through the cookie settings control in the footer.
• If you contact us, we process your message to respond, handle follow-up, deal with rights requests, and maintain necessary records. The legal basis depends on the context and may be legitimate interests, pre-contractual steps, or legal obligation.

Recipients and processors

• Vercel: Hosting, deployments, runtime logs, Web Analytics, and Speed Insights
• Google Ireland Limited / Google LLC: Google Analytics 4 measurement, aggregated reporting, and conversion modelling via gtag.js with Consent Mode v2
• Supabase: Database, edge functions, backups, and platform logs
• Apple iCloud Mail: Mailbox handling for contact and rights correspondence
• We do not sell personal data. We disclose data only when needed to operate the site, answer your enquiry, meet legal obligations, or protect our rights.
• Anonymous push subscriptions are stored securely in Supabase and are not sold, shared, or analysed for advertising.

International transfers

• Primary database region: North EU (Stockholm, Sweden).
• Hosting and related platform operations may involve the United States.
• Data may be processed in the United States and other jurisdictions.
• Apple states that Apple and third-party data centers may be used.
• This means some personal data may be processed outside the EEA, including in the United States, for hosting, delivery, logging, analytics, or email operations. Where that happens, we seek to use the transfer safeguards available for the relevant provider and processing activity.

Retention

• Browser-stored preferences remain on your device until you clear them, reset them, or overwrite them. Recently viewed items are filtered client-side after 30 days.
• Push subscriptions are deleted immediately when you unsubscribe through the site UI. They are also deleted after 90 days of inactivity.
• Vercel runtime logs are retained for 1 hour.
• Google Ireland Limited / Google LLC Analytics data is retained for Up to 14 months (default 2 months) for event-level data.
• Vercel Analytics and Speed Insights data are retained for 30 days.
• Operational snapshot data in Supabase is retained according to internal schedules. Review and catalog snapshots currently use 180-day retention, while selected queue and failed-sync records use 7-day retention.
• Email correspondence is retained for As long as necessary.