Privacy policy

1. Who we are

unblo.com is run by Unblo, Inc., a Delaware C corporation, 2810 North Church Street, STE 89705, Wilmington, DE 19802, United States. Unblo, Inc. is the data controller for the processing described here. Right now our main activity is a research study about how product teams test their software. You can reach us any time at contact@unblo.com.

2. What we collect, and where

Hosting (all pages)

The site is hosted on Vercel. Like any web server, Vercel processes standard request logs: your IP address, browser user agent, and the pages you request. We use these only to keep the site running and diagnose problems.

Analytics — only if you accept (all pages)

When you first visit, a banner asks whether we may use analytics cookies. Nothing analytics-related loads unless you click Accept. If you accept, we load PostHog (hosted in the EU), which uses cookies and similar identifiers and includes session recording: it captures how you move through and interact with the page, with all form inputs masked. We use this to understand how our pages perform. If you decline, no analytics run at all; the site works exactly the same.

Your choice ("accepted" or "declined") is stored in your browser’s local storage so we don’t ask again. To change your mind, clear the site’s data in your browser and the banner will reappear, or email us and we’ll delete what PostHog holds about your visits.

The research pages (/, /pl, /fr)

Beyond the opt-in analytics above, the research pages set no cookies of our own.

If you book a call, you do so through an embedded Google Calendar appointment page. The name, email address, and anything else you type there go to Google and into our Google Workspace calendar, and Google may set its own cookies inside that embed. We use this information to run the call: sending the invite, the Google Meet link, reminders, and rescheduling. Data we hold in Google Workspace, including these bookings, calendar entries and email, is stored at rest in the European Union.

If a link brought you here with tracking parameters (for example utm_source), we pass them into the booking so we know which of us invited you. That is all they are used for.

If you email us instead, we keep your email like any normal correspondence.

Research interviews

Calls are recorded only if you agree, so we can check our notes afterwards and keep the study verifiable. Recordings are kept for the research integrity of the study, and you can ask us to delete yours at any point, during the study or long after it. Everything you tell us is anonymised before it appears in any findings: no names, no company names, no details that could identify you or your employer. You can also skip any question or end a call at any point without giving a reason.

The product page (/v1)

Our earlier product page at unblo.com/v1 uses the same consent-gated PostHog analytics described above. It stores your light/dark theme preference in your browser’s local storage (that preference never leaves your device), and it loads a typeface from Google Fonts, which sends your IP address to Google. The research pages don’t; their fonts are served from our own domain.

Shared report pages (/r/…)

We sometimes share product-testing reports at unblo.com/r/ links. These pages include a chat panel; messages you type there are sent to Google’s Gemini API to generate a reply. Please don’t put personal data into the chat. Report files are stored in Vercel’s Blob storage.

3. What we don’t do

We don’t sell your data. We don’t run ads or share data with ad networks. We don’t use your interview answers for anything other than the study and its anonymised findings.

4. Who processes data for us

• Vercel — hosting, server logs, file storage (USA)
• Google — Calendar, Meet and Workspace email (data stored at rest in the EU); the Gemini API (USA)
• PostHog — analytics and session recording, only after you accept the cookie banner (EU hosting)

Where these providers process data outside the EU, they rely on standard contractual clauses or equivalent safeguards under their own terms.

Our two largest stores of participant data, Google Workspace and PostHog, both keep data at rest in the EU.

5. How long we keep things

• Server logs — kept briefly by Vercel per their retention, not archived by us
• Call recordings — kept for as long as they remain necessary to verify the study’s findings, unless a participant asks otherwise. You can ask us to delete your recording at any time, during the study or long after it, and we will.
• Calendar bookings and email — kept as normal business correspondence
• Analytics (if you accepted) — per PostHog’s retention settings; your consent choice stays in your browser until you clear it

6. Your rights

Depending on where you live (for example under the GDPR), you can ask us to access, correct, delete, or hand over the data we hold about you, object to our processing, or withdraw a consent you gave — including consent to a call recording, at any time, even after the call. Email contact@unblo.com and we will sort it out.

7. Children

The site and the study are not directed at children under 16, and we don’t knowingly collect their data.

8. Changes

If we change this policy, we’ll update the date at the top. If a change is significant and we have your email from the study, we’ll tell you directly.