Privacy policy

In force from: 7 October 2026

SIXSUP is an independent SUP board comparison site. We collect as little data as possible. Below we say plainly what data reaches us, why, and how long we keep it.

1. Who is responsible for your data

The controller of personal data is Daniel Grzeszczak, who runs sixsup.com. Contact for all data matters: contact@sixsup.com.

2. What data we collect and why

Contact form for brands (the “For brands” page). You give us your name, e-mail address, brand, topic and message. We use them only to reply and to continue the correspondence about the matter you wrote about. Legal basis: our legitimate interest in handling enquiries (Article 6(1)(f) GDPR).

“Report an error” form (board pages). You send the reason for the report and, if you wish, a short description and an e-mail address. We attach the board name and the page address to the report. We use the e-mail address only to ask about details or to let you know about a correction. Legal basis: our legitimate interest in keeping the data on the site correct (Article 6(1)(f) GDPR).

Protecting the forms against abuse. When a form is sent, we store on the server a hash of your IP address (not the address itself) and the time of sending, to limit the number of messages from one source. The record is deleted after 24 hours at the latest. Legal basis: our legitimate interest in the security of the site (Article 6(1)(f) GDPR).

Server logs. Like every website, our hosting records the IP address, the time of the visit, the address of the page opened and the browser type in its logs. They are used to keep the site running and secure (Article 6(1)(f) GDPR).

Visit statistics (Google Analytics). Only if you agree in the cookie banner, we use Google Analytics 4 to see how the site is used: which pages are opened, which filters, boards and buttons are used, the language, the type of device and the approximate location (country, city). We do not send the content of the forms, e-mail addresses or names to Analytics. Without your consent the Google code is not loaded at all. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time under “Cookie settings”.

Providing data is voluntary. Without an e-mail address in the form for brands we will not be able to reply. We do not store the content of messages on the website server: it goes only to our e-mail inbox. We do not make automated decisions and we do not profile.

3. How long we keep data

Messages from both forms: up to 24 months from the last correspondence on the matter.
IP address hashes for the forms: up to 24 hours.
Server logs: for the period applied by the hosting provider.
Statistics in Google Analytics: up to 14 months.

4. Who receives the data

OVH sp. z o.o. (website hosting, e-mail, server logs). The data is processed in the European Union.
Google (Google Fonts) and the provider of the Tailwind CSS library (the cdn.tailwindcss.com server). The site downloads fonts and styles from their servers, so your browser connects to them and passes on its IP address. This may mean that the IP address is transferred outside the European Economic Area. We send them no other data and they do not store cookies on your device.
Google Ireland Limited (Google Analytics), only after your consent. Google may process the data also outside the European Economic Area, including in the USA, under the EU-U.S. Data Privacy Framework.

We do not sell data and we do not pass it on to anyone else. The inbox with messages is read only by the controller.

The pages contain links to shops and manufacturers’ websites. After you click, the rules of those sites apply.

5. Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. A message to contact@sixsup.com is enough. We reply within one month at the latest.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

6. Cookies and browser storage

The files needed for the site to work are always used. Analytics cookies are used only after you agree in the cookie banner. We do not use advertising cookies.

sup_lang (cookie, 30 days)

Remembers the language you chose.

sup_rb (cookie, 30 days)

Remembers the boards for which you sent an error report, so that the form is not shown again.

PHPSESSID (cookie, until you close the browser)

Technical session: protects the forms against bots.

sup_lang, sup_compare_slugs (browser storage, until you clear browser data)

The language and the list of boards added to the comparison.

sup_saved_filter_query (session storage, until you close the tab)

The catalogue filters you set last.

sup_consent (cookie, 6 months)

Remembers your choice in the cookie banner.

_ga, _ga_7XDB5VW7ZD (analytics cookies, up to 2 years, only after consent)

Google Analytics: they tell visitors apart and count visits.

You can also delete or block cookies in your browser settings; the site will work, but it will not remember the language.

7. Changes

When we change how we process data, we will update this page and the date at the top.