Privacy policy

Last updated: 5 October 2026

This policy explains how Fiberboom handles personal information when you visit fiberboom.com or contact us.

Who is responsible

Fiberboom is responsible for the personal information described here. Our address is Svanevej 22, 2400 København, Denmark. For privacy questions or requests, email privacy@fiberboom.com.

Information processed and why

When you browse, technical information such as your IP address, browser information, requested URL, time of request and security signals may be processed by our hosting provider, Cloudflare, to deliver the website, prevent abuse and investigate faults. Our legal basis is our legitimate interest in operating a secure and reliable website under Article 6(1)(f) GDPR.

If you email us, we receive your email address and the information you choose to include. We use this to respond to your enquiry. The legal basis is Article 6(1)(b) where your enquiry concerns steps you ask us to take before a contract, or otherwise our legitimate interest in answering correspondence under Article 6(1)(f). Please avoid sending sensitive health information.

Country preference

We store your selected country in the browser (fb_market) to keep your currency, payment options and delivery information consistent as you browse. You can change it using the header selector or clear it in your browser settings. Only available translations are shown; the website is available in English, Polish and German.

Page version preference

When you follow an advertising link to /en/, /de/ or /pl/, we randomly select one of six page versions. A first-party cookie named fb_experiment_v1_en, fb_experiment_v1_de or fb_experiment_v1_pl remembers that selection for 90 days, so repeat visits through those links in the same browser show the same version and price. We record the assigned version and advertising campaign and click identifiers to compare page performance. Clearing cookies or switching browsers may result in a new selection.

Website analytics and browser storage

We collect the website analytics described below on the basis of consent obtained before participation. Choosing Approve or Decline in the on-site notice controls Google advertising measurement, described below. It does not grant or withdraw the separate prior consent for our internal website analytics. Website usage measurement continues after either choice. To withdraw, email privacy@fiberboom.com and stop participating until tracking has been disabled for your visits.

We record pages visited and their sequence, visit times, scroll milestones, visible-tab time up to ten minutes per page view, button clicks, flavour and pack selections, and checkout intent. We record approximate country, region and city from Cloudflare’s network geolocation, and a mobile, desktop or tablet classification inferred from browser signals. We do not request GPS access or store precise coordinates or raw user-agent strings in analytics. Location can be inaccurate, for example when a VPN is used. We also record referring website hostnames and campaign tags in links. We do not record arbitrary form input, payment details, session video, or keystrokes. Restock signups are described separately below. Page URLs are stored without query strings except the campaign tags described above.

We use local storage entries fb_visitor and fb_session to recognise the same browser and group activity into visits. The browser identifier expires after 90 days without a visit; a new session begins after 30 minutes without visible-page activity. Identifiers are random and are not names or email addresses. Clearing storage or using another browser breaks this connection. If browser storage is unavailable, identifiers last only for the current page.

Events are stored in Cloudflare D1 and removed by daily cleanup after 90 days, subject to provider backup retention. Administrators use a separate secure fb_admin cookie lasting up to eight hours. For abuse prevention, short-lived request limits use a keyed hash derived from an IP address; raw IP addresses are not saved in the analytics database. Cloudflare may process IP addresses for hosting and security.

Consent records are maintained separately from the on-site notice. Please contact us if you have questions about your consent or want to withdraw it.

Google advertising measurement

With your approval, we load the Google tag for Google Ads to measure advertising performance. Google may receive your IP address, browser and device information, page URLs and advertising click identifiers, and use cookies for attribution. The tag is not loaded before approval. Decline prevents activation; if you previously approved, it changes the Google consent signals to denied and stops our conversion events. Ad personalization remains disabled. We store your choice for 90 days in fb_google_ads_consent_v1. Product-page visits and order-button clicks are the actions prepared for measurement; these are not completed purchases. You can change your choice using the button below.

Change advertising choice

Restock emails and selected offers

When you click Checkout, we save the offer you selected: page version, flavour, pack size, displayed price and currency, delivery market, time and campaign tags. This is linked to the browser and visit identifiers described above. If you submit the restock form, we attach your email address and signup time to that same offer record so we can notify you about availability and send the advertised 30% discount offer. Submitting the form gives consent for those emails; it does not place an order or authorize payment. We do not add you to unrelated marketing lists.

You can withdraw consent or request removal by emailing privacy@fiberboom.com. These offer and email records are stored in Cloudflare D1 and deleted after 90 days by daily cleanup unless removed sooner at your request. The restock email is not sent automatically by this website; Fiberboom will use the signup list to contact interested visitors.

Who receives information

We use Cloudflare for website hosting, content delivery and security, and service providers for company email. These providers may process information to supply their services. We may also disclose information where legally required or necessary to establish, exercise or defend legal claims. We do not sell your personal information.

International processing

Our providers operate internationally, so information may be processed outside the European Economic Area. Where a restricted transfer occurs, applicable safeguards must be in place, such as an adequacy decision or the European Commission’s Standard Contractual Clauses. You can request information about relevant safeguards by emailing us. See also Cloudflare’s privacy information.

How long information is kept

We keep correspondence for as long as needed to answer and follow up your enquiry, and longer only where necessary to meet a legal obligation or deal with a dispute. Technical information is retained according to the hosting and security services in use and the period needed for security and troubleshooting. Retention depends on the purpose and type of record; you can contact us for information about a specific record.

Your rights

Subject to the GDPR’s conditions, you may request access, correction, erasure, restriction or portability of your information. You may object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. We may ask for information needed to verify your identity before handling a request.

You may complain to the Danish Data Protection Agency, Datatilsynet, or your local supervisory authority.

Your choices and policy updates

You do not need to email us to browse the website. If you choose not to provide contact information, we may be unable to respond to an enquiry. We do not use this release to make automated decisions that produce legal or similarly significant effects. We will update this policy when our processing changes.