Privacy Policy.

This Privacy Policy explains how Krog Digital LLC (“Krög Digital”, “we”, “us”) collects, uses, shares and protects personal information when you visit krog.digital, contact us, or use our services as a client. Krog Digital LLC is a U.S. limited liability company and the controller of this information: it decides why and how the information is used.

Controller

Krog Digital LLC, trading as Krög Digital

Mailing address

Krog Digital LLC, c/o registered agent, 1101 N Muldoon Rd, Anchorage, AK 99504, United StatesThis is our registered agent’s address, for legal mail. It is not an office.

Privacy contact

zane@krog.digital

Website

krog.digital

Our services are for businesses. Most of the personal information we handle belongs to the people who represent those businesses, such as owners, employees and contractors, and to visitors of our website.

This policy doesn’t cover the advertising platforms, which handle information under their own privacy policies, or other websites we link to. Our Cookie Policy lists every cookie and browser storage item we use, and our Terms of Service govern the use of the website and our services.

When you visit the website

• Server logs. Like most websites, our host records each request: your IP address, your browser’s user agent, the address of the page and the time. We use the logs to deliver the site, fix errors and stop abuse. When the human check is shown or passed after an ad click, the log line also notes the name of the ad-click parameter and the campaign source, not the click identifier itself.
• Approximate country. Our host tells our server which country your IP address most likely belongs to. We use it only to decide whether to ask for your consent before advertising cookies (section 4). We don’t collect your precise location.
• The human check. The first time you open the site, a short check confirms that you are a person and not an automated program. Your browser either completes a small computation or, when we turn it on, Cloudflare Turnstile. When you pass, we set the krog_human cookie so you aren’t asked again for up to 30 days. The cookie is signed and tied to your browser’s user agent; it doesn’t identify you.
• Advertising measurement. We use the Google Ads tag to learn which of our ads bring people to the site and to show our ads to people who visited it. Depending on where you are and what you choose, it may set cookies and send Google an online identifier, your IP address, browser details, the pages you view, whether you arrived from an ad, and whether you clicked a link to contact us by email or through a messaging service (which we count as a conversion).
• Browser storage. A few features keep small notes in your browser: whether the opening animation already played, your Krög AI conversation and your progress on a guide’s launch checklist. They stay on your device and are not sent to us. Krög AI is a scripted assistant that runs in your browser; your questions are not sent to our servers or to any AI model.

When you contact us

The request form and the early-access and forum forms on this site prepare a message for you to send by email or through a messaging service. The forms don’t send anything to our servers: we receive the message only if you send it. When you contact us, we get what you include, such as your name, business name, website, email address or messaging username, the platforms you’re interested in, how you work, your industry, your monthly advertising budget range, when you want to start and your notes. Your email provider or messaging service handles the message under its own privacy policy.

When you become a client

• Account and contact details: the names, roles, business email addresses and messaging usernames of the people we work with. We receive them from you or from the business you work for.
• Business-verification records: the identity details of the business representative and a copy of their government-issued ID document, and business documents such as registration records, proof of address, ownership and representative details and the business website. The platforms require verified advertisers, and we verify each business before we open accounts for it.
• Communications: the emails and messages we exchange, and our notes on your requests and decisions.
• Advertising account details: what we need to set up and manage your accounts, such as account and business IDs on each platform, the users or email addresses that need access, and your website domains. The accounts belong to your business. They are also linked to our business as your agency (for example through a manager account or a business portfolio with agency access), so we can set them up and support them.
• Information from the platforms: account status, review outcomes and notices the platforms send about the accounts we manage for you.
• Public sources: we may check the business details you give us against public sources, such as company registries and your website.

Information we don’t want

Please don’t send us sensitive information we haven’t asked for, such as health information, or the passwords to your own accounts.

We use personal information only for the purposes below. If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, the last column shows the legal basis we rely on for each purpose.

“Legitimate interests” means we use information for a reasonable business purpose you would expect, after weighing it against your rights and interests. Ours are running a secure and reliable website, understanding which of our ads work, answering inquiries, preventing fraud and misuse, meeting the advertising platforms’ verification requirements and protecting our legal rights. You can object to any use based on legitimate interests (section 9) and ask us how we weighed them.

We don’t sell personal information for money, and we don’t use it for purposes unrelated to the ones above without telling you first.

We use a small number of cookies and browser storage items. Some are strictly necessary for the site to work as you ask, for example to remember the human check and your cookie choice. Others are advertising cookies used by the Google Ads tag. Our Cookie Policy lists each one, with its purpose and how long it lasts.

Advertising cookies and your choice

• In the EEA, the UK and Switzerland, advertising cookies stay off until you allow them. Until then, the Google tag runs in a restricted mode: it doesn’t set or read advertising cookies and removes ad-click identifiers from what it sends. It may still send Google basic signals without cookies, such as that a page loaded, which Google uses to estimate in aggregate how well ads perform.
• Everywhere else, advertising cookies are on by default, and you can turn them off at any time. We renew that choice each time you visit, so it doesn’t lapse.
• Global Privacy Control. If your browser sends a GPC signal, advertising cookies stay off in that browser, even if you allowed them before. They come back on only if you allow them in Cookie settings while the signal is on (section 11).

Open Cookie settings to allow or refuse advertising cookies at any time:

Like any request on the internet, loading the Google tag tells Google your IP address and basic browser details. Google uses the information it receives under its own policies, and may also use it for its own purposes, such as keeping its services secure; see how Google uses information from sites that use its services (opens in a new tab). You can manage the ads Google shows you in My Ad Center (opens in a new tab).

We share personal information only as described in this section.

Our service providers

These companies process personal information for us under contracts that limit their use of it to providing their services to us. One exception: for the Google Ads tag (advertising measurement and remarketing), Google acts as an independent controller and uses the data under its own privacy policy and Google’s controller data protection terms (section 4).

The advertising platforms you choose

When we open, set up or manage an advertising account for your business, we give the platform the business and contact details its sign-up, verification and access settings require, and we act on the account as your agency. Each platform uses that information as an independent controller, under its own terms and privacy policy. We share information with a platform only for the accounts you ask us to work on.

Others

• Email and messaging services you choose to use with us, which carry and store our messages under their own terms and privacy policies.
• Professional advisers, such as lawyers and accountants, who must keep it confidential.
• Authorities, when the law requires it, for example to comply with a court order or a lawful request, or when we believe in good faith that disclosure is needed to protect the rights, property or safety of our clients, the public or us, including to prevent fraud.
• A successor business, if Krog Digital LLC is part of a merger, acquisition or sale of all or part of its business. This policy keeps applying to your information, and we will tell you before it is handled differently.
• Anyone else, with your permission or at your direction.

We don’t sell personal information for money, and we don’t give it to others for their own marketing. Apart from the Google Ads tag described in section 4, information from visits to our website does not go to advertising companies.

We are based in the United States, and our service providers process information in the United States and other countries. If you are in the EEA, the UK or Switzerland, these countries may not protect personal information in the same way as your own. When you send information to us directly, it is processed in the United States so we can provide what you asked for. Our providers may also process data in the European Union and other countries where they run servers; each provider lists its locations in its data processing terms.

When we transfer personal information to our service providers, we rely on:

• the Standard Contractual Clauses approved by the European Commission, included in each provider’s data processing terms, with the UK International Data Transfer Addendum and the adjustments Swiss law requires; and
• where a provider participates, the EU-U.S. Data Privacy Framework (opens in a new tab), its UK Extension and the Swiss-U.S. Data Privacy Framework. Krog Digital LLC itself does not participate in the Data Privacy Framework.

When we pass information to an advertising platform at your request, the transfer is necessary to provide the service you asked for. To get a copy of the safeguards we rely on, email zane@krog.digital.

We keep personal information only as long as we need it for the purposes in section 3. Then we delete it, or de-identify it so it can no longer be linked to you.

We may keep information longer when the law requires it, or for as long as we need it to establish, exercise or defend a legal claim. Copies in our providers’ backups are overwritten on their normal schedules.

We protect personal information with measures that fit the risk:

• The website is served only over encrypted connections (HTTPS).
• Client and verification records are kept with our database provider, and only the people who need them for their work can access them.
• Our hosting, database and email providers encrypt the information they store and run their own security programs.
• The human-check cookie is signed, so it can’t be forged, and it stops working in a browser with a different user agent.

No system is perfectly secure, and we can’t promise that information will never be accessed without permission. If a security incident affects your personal information, we will notify you and the authorities where the law requires it. Please keep your own logins safe, and tell us right away at zane@krog.digital if you think something is wrong.

If you are in the EEA, the UK or Switzerland, data protection law (the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection) gives you these rights over your personal information:

• Access: confirm whether we hold information about you and get a copy.
• Correction: have inaccurate or incomplete information corrected.
• Deletion: have information deleted, for example when we no longer need it or you withdraw consent.
• Restriction: have us limit how we use it, for example while we check a correction or an objection.
• Portability: receive the information you gave us in a structured, machine-readable format, or have it sent to another company, where we process it by automated means on the basis of your consent or a contract.
• Objection: object to any use based on legitimate interests. We will stop unless we have compelling legitimate grounds or need the information for a legal claim. You can always object to direct marketing.
• Withdrawing consent: where we rely on consent, withdraw it at any time, for advertising cookies in Cookie settings. This doesn’t affect what we did before you withdrew it.

How to use your rights

Email zane@krog.digital. We may ask for information to confirm your identity first, and we won’t ask for more than we need. We reply within one month. If a request is complex or we receive many, we may take up to two more months, and we will tell you why. Using your rights is free, unless a request is clearly unfounded or excessive.

Complaints

We would like the chance to address a concern first, so please write to us. You also have the right to complain to a data protection authority, in particular where you live or work or where you think a breach happened:

• EEA: your national authority, listed by the European Data Protection Board (opens in a new tab).
• UK: the Information Commissioner’s Office (ICO) (opens in a new tab).
• Switzerland: the Federal Data Protection and Information Commissioner (FDPIC) (opens in a new tab).

Do you have to give us your information?

To visit the website, no: our host needs basic technical data to send you pages, the human check needs its cookie to let you in, and advertising cookies are optional. To contact us, you choose what to include, but we need a way to reply. To become a client, yes: the platforms require verified advertisers, and we can’t open or manage accounts for a business we haven’t verified.

Automated decisions

We don’t make decisions based solely on automated processing that have legal or similarly significant effects on you. The human check is automated, but it only decides whether a browser may open the site; it doesn’t assess you as a person. If it keeps stopping you, email us and a person will help.

United Kingdom and Switzerland

In the UK, the UK GDPR and the Data Protection Act 2018 apply, and references in this policy to the GDPR include the UK GDPR. Transfers from the UK rely on the UK International Data Transfer Addendum or the UK Extension to the Data Privacy Framework. In Switzerland, the Federal Act on Data Protection (FADP) applies, and transfers rely on the Standard Contractual Clauses with the adjustments Swiss law requires or the Swiss-U.S. Data Privacy Framework.

California and a growing number of other states, including Colorado, Connecticut, Oregon, Texas, Utah and Virginia, give their residents rights over personal information. These laws apply to businesses that meet certain thresholds, and some exclude information handled in a business-to-business context. Whichever law applies, we honor the requests described here from residents of any U.S. state.

What we collect, and where it comes from

We use each category for the purposes in section 3 and keep it for the periods in section 7. We disclose it for business purposes to our service providers and, for clients, to the advertising platforms they ask us to work with (section 5). Through the Google Ads tag, we share identifiers and internet activity with Google for advertising, as described below.

Selling and sharing

We don’t sell personal information for money. However, the Google Ads tag lets Google receive identifiers and internet activity from our site, so we can show our ads to people who visited it. Under California law this may count as “sharing” for cross-context behavioral advertising, and under other states’ laws as “targeted advertising” or a “sale”.

You can opt out at any time, without giving a reason: turn advertising cookies off in Cookie settings, or turn on Global Privacy Control in your browser. We don’t knowingly sell or share personal information of anyone under 16.

Sensitive personal information

We collect sensitive personal information only from clients, to verify businesses and prevent fraud. We don’t use it to infer anything about you, and we use it only for purposes these laws allow, so the right to limit its use doesn’t apply.

Your rights

• Know and access: ask what personal information we have collected about you, where it came from, why we use it and whom we disclose it to, and get a copy.
• Delete personal information we collected from you, subject to exceptions the law allows.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information and of targeted advertising, as described above.
• No discrimination: we won’t treat you differently for using any of these rights.

How to make a request

Email zane@krog.digital. We confirm receipt within 10 business days and reply within 45 days; if we need more time (up to another 45 days), we will tell you why. To protect you, we verify a request by matching what you tell us with the information we hold. You may use an authorized agent; we will ask for your signed permission and may ask you to confirm your identity with us directly.

If we decline your request, you can appeal by replying to our decision with “Appeal” in the subject line. We answer appeals within the time your state’s law allows. If you disagree with the outcome, you can contact your state’s Attorney General.

California residents may also ask about disclosures of personal information to third parties for their own direct marketing (California Civil Code § 1798.83). We make no such disclosures.

Global Privacy Control (opens in a new tab) (GPC) is a setting in some browsers and extensions that tells websites you don’t want your personal information sold or shared. We treat a GPC signal as a valid request to opt out: advertising cookies stay off in that browser, just as if you had turned them off in Cookie settings. Because a website visit doesn’t tell us who you are, the opt-out applies to the browser that sends the signal. The signal overrides a choice to allow advertising cookies that you made before it was on. If you allow them in Cookie settings while the signal is on, we follow that explicit choice.

Some browsers also send an older “Do Not Track” signal. There is no common standard for how to respond to it, so we don’t; we honor Global Privacy Control instead.

Our website and services are for businesses and are not directed to anyone under 18. We don’t knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, email zane@krog.digital and we will delete it.

Our website links to other websites and services, including the advertising platforms, the partners in our promo-code listings and messaging services. Their own privacy policies apply when you use them. Each platform decides how it uses the information it receives when you or we open and run an account on it.

We may update this policy when our practices or the law change. We will post the new version on this page and change the date at the top. If a change materially affects how we use personal information we already hold, we will tell clients by email before it takes effect and, where the law requires, ask for consent.

For any question about this policy or your personal information, or to use your rights, write to us:

Email

zane@krog.digital

Mail

Krog Digital LLC, c/o registered agent, 1101 N Muldoon Rd, Anchorage, AK 99504, United StatesOur registered agent’s address, for legal mail. It is not an office, so please email us first.