Hu-manity Rights, Inc. — Cookie Compliance
Last Updated: August 20, 2026
Scope of This Policy
This Privacy Policy (“Policy”) explains how Hu-manity Rights, Inc. (“Hu-manity,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data when you visit our websites at cookie-compliance.co and hu-manity.co (together, the “Sites”), sign up for or use our Cookie Compliance software service (the “Service”), or otherwise interact with us directly.
This Policy also describes, for transparency, how Hu-manity processes personal data on behalf of our customers as part of delivering the Service — for example, consent choices, timestamps, and IP addresses collected from visitors to our customers’ own websites through the Cookie Compliance widget. Where Hu-manity processes personal data on behalf of a customer, Hu-manity acts as a data processor (or “service provider”), the customer is the data controller, and that relationship — including the customer’s own end users — is governed by the customer’s own privacy policy and by our Data Processing Agreement, available at [insert DPA URL] (the “DPA”), which is incorporated into our Terms of Service. This Policy governs Hu-manity’s role as a data controller: our relationship with you as a visitor to our Sites, a prospective or current subscriber to the Service, or another individual who contacts us directly.
Personal Data We Collect
Information You Provide to Us
If you fill out a contact, demo-request, or sign-up form on our Sites, or otherwise contact us directly, we collect your name and email address.
Account and Billing Information (Service Subscribers)
If you subscribe to the Service, we (or our payment processors, Stripe and Braintree, including PayPal as a payment method within Braintree) collect the name, email address, billing address, and payment details needed to create and administer your account and process payment. Hu-manity does not itself store full payment card numbers; card data is handled directly by our payment processors.
Usage Data
When you access our Sites or the Service, we automatically collect technical and usage information, including your IP address, browser type and version, device identifiers, referring URL, pages visited, and time and date of visit.
Data Processed Through the Service on Behalf of Customers
When one of our customers deploys the Cookie Compliance widget on their own website, the Service records the consent choices, timestamp, IP address (used, among other things, to apply the correct regional regulatory ruleset), and browser/device information of that customer’s website visitors, in order to generate and store proof-of-consent records on the customer’s behalf. Hu-manity processes this data solely as a processor, on the customer’s documented instructions, under the terms of the DPA. If you are a visitor to one of our customers’ websites and have questions about this data, please contact that website operator directly; their own privacy policy governs their use of the Service.
Cookies and Similar Tracking Technologies
Cookie-compliance.co uses a single cookie:
| Cookie | Purpose | Duration |
| __cf_bm | Set by Cloudflare, our security provider, to detect and mitigate automated bot traffic. It does not track you across other websites and is not used for advertising. | 30 minutes |
We present this cookie through our own Cookie Compliance consent banner and treat it as requiring your consent, consistent with the approach taken by data protection authorities such as France’s CNIL, rather than relying on the “strictly necessary” exemption available under EU/UK law for some security cookies.
We use Fathom Analytics for website analytics; Fathom does not use cookies and does not collect or store personal data about individual visitors.
Our application at app.hu-manity.co uses strictly necessary session cookies to keep you signed in while using the Service. If you make a payment through Stripe or Braintree (including PayPal as a payment method within Braintree), those payment processors may set their own cookies for fraud prevention and transaction security; those cookies are controlled by the payment processor, not by Hu-manity.
If this changes — for example, if we add analytics or advertising cookies in the future — we will update this section and, where required by law, obtain your consent first.
How We Use Personal Data
We use the personal data described above to:
- Provide, maintain, and improve the Sites and the Service
- Create and administer your account, and process payment for subscriptions
- Respond to inquiries and provide customer support
- Send you service-related communications and, where you have opted in, marketing communications
- Monitor usage, detect, prevent, and address technical or security issues
- Comply with our legal obligations
Legal Bases for Processing (EEA/UK Visitors)
If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR to process your personal data: performance of a contract (to provide the Service you’ve subscribed to); your consent (for example, for optional marketing communications or non-essential cookies); our legitimate interests (to improve and secure the Sites and the Service, provided those interests are not overridden by your data protection rights); and compliance with a legal obligation.
How We Share Personal Data
We do not sell personal data, and we do not share personal data for cross-context behavioral advertising. We share personal data only with the following categories of recipients, each of which is contractually bound to protect it and use it only for the purposes described:
- Amazon Web Services (AWS) — cloud hosting and infrastructure, transactional email delivery, and data warehousing
- Cloudflare — authoritative DNS for our domain and bot-detection/mitigation security services
- Help Scout — customer support / helpdesk platform
- KeyCDN — content delivery network
- Fathom Analytics — privacy-focused, cookieless website analytics
- Sinch Mailjet — marketing/newsletter email delivery
- Stripe and Braintree (including PayPal as a payment method within Braintree) — payment processing
- Intuition Machines, Inc. (hCaptcha) — anti-bot verification on customer registration
A current list of the vendors we use to process personal data on behalf of our Service customers (our “sub-processors”) is maintained in the DPA. We may also disclose personal data if required to do so by law, or in the good-faith belief that disclosure is necessary to comply with a legal obligation, protect the rights or safety of Hu-manity or others, or investigate wrongdoing.
International Data Transfers
Hu-manity is based in the United States, and personal data we collect may be transferred to, stored, and processed in the United States and other countries where we or our vendors operate. Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (SCCs) (and the UK’s International Data Transfer Addendum, where applicable) as our primary transfer mechanism, supplemented where appropriate by additional safeguards. By using the Sites or the Service, you understand that your personal data will be processed in the United States as described in this Policy.
Data Retention
We retain personal data for as long as needed to provide the Sites and the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you cancel your subscription, we retain your account data for a limited period as described in our Terms of Service before deletion, unless a longer period is required by law.
Data Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal data. No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal data, we will notify affected individuals and/or applicable regulators without undue delay, as and to the extent required by applicable law.
Your Privacy Rights — EEA / UK Residents (GDPR)
If you are a resident of the European Economic Area, the United Kingdom, or Switzerland, you have the right to request access to, correction of, or erasure of your personal data; to restrict or object to our processing of your personal data; and to request that we transfer your personal data to another organization (data portability), in each case under certain conditions set out in applicable law. You also have the right to lodge a complaint with your local data protection authority. To exercise these rights, contact us at info@hu-manity.co. We will respond within one month, as required by the GDPR, and may ask you to verify your identity first.
Your Privacy Rights — U.S. State Residents
Depending on your state of residence, you may have rights under applicable U.S. state privacy laws (including California, Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy statutes) to know what personal data we have collected about you, to request correction or deletion of that data, to obtain a portable copy of it, and to opt out of the sale or sharing of personal data or its use for targeted advertising. Hu-manity does not sell personal data and does not share personal data for cross-context behavioral advertising.
You may exercise these rights by contacting us at info@hu-manity.co. We will not discriminate against you for exercising your privacy rights. We will respond to verifiable requests within the timeframe required by applicable state law (generally forty-five days, with a possible extension as permitted by law).
Because we do not sell or share personal data, Global Privacy Control and similar opt-out signals do not currently change how we process your data — but we will honor such signals as an opt-out request for sale/sharing if our data practices change in the future.
Children’s Privacy
Our Sites and Service are not directed to children, and we do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at info@hu-manity.co and we will take steps to delete it.
Third-Party Links
Our Sites may contain links to other websites. This Policy applies only to Hu-manity’s Sites; we encourage you to review the privacy policy of any third-party site you visit.
Changes to This Policy
We review this Policy at least annually and will update it as our practices, our vendors, or applicable law change. We will post any changes on this page and update the “Last Updated” date above. If changes are material, we will provide additional notice as described in our Terms of Service.
Contact Us
If you have questions about this Policy or wish to exercise your privacy rights, please contact us at info@hu-manity.co.