Grej — Website Privacy Notice

Effective 4 October 2026

This notice covers visits to the public website grej.app. Using the Grej app itself is covered by our separate Privacy Policy.

What we count

We count page views on this website with our own simple counter, so we can see how many people visit and which pages they read. For each page view we store:

  • the page address, without any query string (for example /support);
  • on the first page of a visit, the campaign tags in the link that brought you here, if it had any (utm_source, utm_medium, utm_campaign, utm_content, utm_term — for example utm_source=newsletter). These are labels we put in the links we share, so we can tell which campaign worked; nothing else in the address is kept;
  • the website that linked you here, if any — only its domain name (for example www.google.com);
  • whether the device is a phone or a computer, worked out from the browser's description of itself;
  • whether the page was opened inside another app's built-in browser, and which app (for example Instagram), worked out the same way — sign-in with Google does not work in those browsers, and we need to know how often that happens;
  • an anonymous visitor code, so a visitor who reads several pages on the same day is counted once.

We also count a few actions on the site, so we can see which parts of a page help visitors find their way in: a click on one of the main buttons and links (for example Continue with Apple, the App Store link or a plan's button), and how far down a page a visitor scrolls (a quarter, half, three quarters, the end). For each one we store which button or depth it was, the page address, phone or computer, the same app detail as above, and the same anonymous visitor code. We do not record anything you type, where your mouse moves, or any other clicks.

Sometimes we try two versions of a page to see which one helps visitors more (an "A/B test"). Which version you see is decided from the same anonymous visitor code, so you see the same version all day and may see the other one tomorrow. We store which version was shown, with the page address, phone or computer, the app detail above and the visitor code — and compare how many visitors who saw each version clicked on through. No cookie is set for this either.

The visitor code is a one-way hash of your IP address and browser description, mixed with a secret key that changes every day. We do not store your IP address or browser description, the code cannot be turned back into either, and because the key changes daily, the same person gets a different code each day — so we cannot follow anyone from one day to the next, or link a visit or a click to a Grej account, including one you create after clicking through.

If you follow one of our sign-in links into the Grej app, the link carries a short description of this visit — the page you arrived on, the kind of source and campaign labels described above, the domain that linked to you, any page version you were shown, and the date — so that if you create an account, we can see which pages and campaigns bring people to Grej. It is held only in the open page while you browse (nothing is stored on your device) and contains no visitor code, IP address or device details. It is recorded only if you create a new account, and is linked to that account for one day; see the app's Privacy Policy.

What we don't do

  • No cookies, and nothing stored on your device for this counting.
  • No third-party analytics, advertising or tracking services.
  • No profiles of visitors, and no selling or sharing of this data.

Legal basis and storage

We count visits on the basis of our legitimate interest in understanding how the website is used (GDPR Art. 6(1)(f)). The counts are stored with the rest of our service data on Google Cloud in the EU. Separately, like any web server, ours keeps technical request logs — including IP addresses — for security and operations; these are retained for up to 180 days and are not used to count visitors.

Contact

Humeko Oy, business ID 2081131-0, Matbackantie 8, 04130 Sipoo, Finland. Questions: privacy@grej.app. You may also lodge a complaint with your supervisory authority — in Finland the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).