Privacy Policy

The controller within the meaning of Art. 4(7) of the EU General Data Protection Regulation (GDPR) responsible for data processing on this website is:

Email: support@testassets.io

2.1 When Visiting the Website

When accessing our website, the browser on your device automatically sends information to our website server. This information is temporarily stored in a server log file and automatically deleted after 30 days. The following information is collected without any action on your part:

• IP address of the requesting computer (anonymized after 30 days)
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser used and, if applicable, your computer's operating system and screen resolution

2.2 During Registration and Use

When registering for our service, we collect the following data, which is necessary for the performance of the contract:

• Email address (required for account creation and communication)
• First and last name (optional, for personalization)
• Organization name (optional)
• Test data and content you create within the Service
• Marketing opt-in preference (optional, stored separately)

Your personal data is processed exclusively for the following purposes:

• Provision and ensuring the functionality of our website (Art. 6(1)(f) GDPR)
• Performance of the contractual relationship, including account management, authentication, and access control (Art. 6(1)(b) GDPR)
• Responding to your contact inquiries (Art. 6(1)(b) or Art. 6(1)(f) GDPR)
• Ensuring IT security and preventing misuse (Art. 6(1)(f) GDPR)
• Sending marketing communications, only with your explicit consent (Art. 6(1)(a) GDPR)

The processing of your personal data is based on the following provisions of Art. 6(1) GDPR:

• Art. 6(1)(a) GDPR — Consent: For optional cookies and marketing communications. You may withdraw your consent at any time with effect for the future.
• Art. 6(1)(b) GDPR — Contract performance: For processing necessary to perform our contract with you, including account creation, test data management, and the provision of the Service.
• Art. 6(1)(f) GDPR — Legitimate interest: For ensuring website functionality, IT security, and fraud prevention. Our legitimate interest lies in operating a secure and functional service.

Your personal data will not be transmitted to third parties except in the following cases:

• If you have given your express consent (Art. 6(1)(a) GDPR)
• If there is a legal obligation to disclose (Art. 6(1)(c) GDPR)
• If disclosure is necessary for the assertion, exercise, or defense of legal claims (Art. 6(1)(f) GDPR)
• To our sub-processors listed in Section 6, who process data on our behalf under data processing agreements pursuant to Art. 28 GDPR

We use the following third-party service providers to operate the Service. All sub-processors are bound by data processing agreements in accordance with Art. 28 GDPR:

• Cloud hosting and database services for storing your account data and test assets (EU data centers where available)
• Authentication services for secure user sign-in and session management
• Email delivery services for account-related notifications (e.g., email verification, password reset)

A current and complete list of sub-processors can be requested at any time by contacting us at the email address listed in Section 1.

Our website uses cookies and browser local storage technologies. Cookies are small text files stored on your device by your browser. They do not damage your device and do not contain viruses or malware.

7.1 Essential Cookies and Storage (No Consent Required)

The following cookies and local storage entries are strictly necessary for the operation of the Service and are set without requiring your consent (Art. 6(1)(f) GDPR):

• Authentication session cookies: Required to keep you signed in and to manage your user session securely.
• Cookie consent preference (localStorage): Stores your cookie consent choice ('essential' or 'all') so the cookie banner is not shown repeatedly. Key: 'cookie-consent'.
• Language preference (localStorage): Stores your selected display language for a consistent experience.

7.2 Optional Cookies (Consent Required)

Additional cookies that are not strictly necessary are only set after you have given your explicit consent via our cookie banner by clicking 'Accept all'. These may include:

• Usage analytics: To understand how visitors interact with the Service and to improve user experience.
• Enhanced personalization preferences beyond the basic language setting.

You can withdraw your consent at any time by clearing your browser's local storage and cookies. On your next visit, the cookie banner will be displayed again, allowing you to make a new choice.

You can also configure your browser to reject cookies entirely or to notify you before a cookie is set. Please note that some features of the Service may not function properly if cookies are disabled.

We store your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law:

• Account data (email, name, organization): Retained for the duration of your account. Deleted within 30 days of account deletion.
• Test data and assets: Retained for the duration of your account. Permanently deleted within 30 days of account deletion.
• Server log files: Automatically deleted after 30 days.
• Cookie consent records: Stored in your browser's local storage until cleared by you.
• Data subject to statutory retention obligations (e.g., tax or commercial law): Retained for the legally required period (up to 10 years).

Our sub-processors may process data outside the European Economic Area (EEA). In such cases, we ensure an adequate level of data protection through:

• Adequacy decisions by the European Commission (e.g., EU-U.S. Data Privacy Framework)
• Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR
• Additional technical and organizational measures where necessary

You may request copies of the applicable transfer safeguards by contacting us.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You may request information about whether and which personal data we process about you.
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data, subject to legal retention obligations.
• Right to restriction (Art. 18 GDPR): You may request the restriction of processing under certain conditions.
• Right to data portability (Art. 20 GDPR): You may request to receive your data in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21 GDPR): You may object to processing based on Art. 6(1)(f) GDPR at any time for reasons relating to your particular situation.
• Right to withdraw consent (Art. 7(3) GDPR): You may withdraw any consent given at any time. The withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at: support@testassets.io

We will respond to your request within one month in accordance with Art. 12(3) GDPR.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR (Art. 77 GDPR).

We use TLS/SSL encryption (Transport Layer Security) for all data transmission between your browser and our servers. All data is encrypted both in transit and at rest.

We employ appropriate technical and organizational security measures in accordance with Art. 32 GDPR to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are regularly reviewed and updated to reflect current technological standards.

This privacy policy is currently valid as of February 2026.

We may update this privacy policy from time to time to reflect changes in our data processing practices, legal requirements, or regulatory guidance. The current version is always available on this website. We recommend reviewing this page periodically. Material changes will be communicated to registered users via email.