Privacy policy

Last updated: 7 October 2026

This policy covers the website at tripl.io and its subdomains, including the documentation at docs.tripl.io. It does not cover the tripl software you run yourself: a self-hosted tripl instance sends nothing to us, and the organization that runs it decides what happens to the data in it.

Who is responsible

The controller of personal data processed through this website is Vladislav Denisov, a sole trader (autónomo) based in Barcelona, Spain. For anything about privacy, write to legal@tripl.io.

What we process and why

Serving the site

When you open a page, your browser sends a request that includes your IP address, browser and device details, the page requested and the referring page. Our hosting and content-delivery providers process this to deliver the site and protect it from abuse. The legal basis is our legitimate interest in running a working, secure website (Article 6(1)(f) GDPR). We do not use this data to identify you.

Analytics, only with your consent

If you click Accept in the cookie banner, we use analytics cookies to understand how the site is used: which pages are visited, how visitors arrived, and general device, browser and approximate location information (country or city, derived from the IP address). We use this only in aggregate, to improve the site. The legal basis is your consent (Article 6(1)(a) GDPR).

If you click Reject or make no choice, no analytics cookies are set and nothing is stored on your device. Our analytics providers still receive limited, cookieless signals about the visit: that a page was viewed, the time, the type of browser and device, and the request data described above. They carry no identifier that links one visit to another, and the providers use them only in aggregate to estimate how many people visit the site. The legal basis for these signals is our legitimate interest in knowing, in aggregate, how the site is used (Article 6(1)(f) GDPR); you can object to them by writing to us, or block them with your browser's tracking protection.

Analytics data is kept for no longer than 14 months, then deleted. You can withdraw consent at any time under Cookie settings at the bottom of every page; we then remove the analytics cookies from your browser. Withdrawing does not affect processing that happened before.

Your consent choice

Your choice in the cookie banner is stored in a cookie named tripl_consent, set for tripl.io and its subdomains, so one answer applies across the site and the documentation. It holds only "granted" or "denied", expires after 180 days (we then ask again), and is not used to identify you. This is strictly necessary to respect your choice and needs no consent.

When you email us

If you write to us, we use your address and message to reply, and keep the correspondence for as long as needed to deal with it. The legal basis is our legitimate interest in answering you, or steps you asked for before entering into a contract (Article 6(1)(b) GDPR).

Who receives the data

We use hosting and content-delivery providers and analytics providers. All of them act as our processors under data processing agreements and may only use the data on our instructions. We do not sell personal data, share it for advertising, or use it for automated decisions about you.

These providers may process data outside the European Economic Area, including in the United States. Such transfers rely on an adequacy decision (the EU–US Data Privacy Framework, for certified providers) or on the European Commission's standard contractual clauses. You can ask us for a copy of the safeguards that apply.

Links to other sites

This site links to GitHub, where the source code lives. GitHub is governed by its own privacy policy.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have it corrected or erased;
• restrict or object to its processing;
• receive it in a portable format;
• withdraw consent at any time, without affecting earlier processing.

To exercise any of them, write to legal@tripl.io. We answer within one month. You can also complain to a supervisory authority; in Spain that is the Agencia Española de Protección de Datos (aepd.es).

Children

This site is meant for professionals and is not directed at children.

Changes

If this policy changes, we update the date at the top. If a change needs your consent, we ask for it again through the cookie banner.