Privacy Policy

Last updated: October 2026

1. Who we are

DoubleSync is made by MomentApproach - Unipessoal, Lda. (NIPC 510670520), a company registered in Portugal that trades as Double Shore. We are the controller of the personal data described on this page.

2. What we collect and why

Contact and lead forms

If you write to us through the contact form, we keep your name, email address, company, the product you asked about and your message. We use them to reply to you.

Licence requests and orders

When you request or buy a licence, we collect your company name, billing address, country, VAT number, contact name, billing email and the domain the licence is for. We use them to invoice you, to issue the licence key and to keep our accounting records. For a VAT number from another EU country we check it against the European Commission's VIES service to decide whether VAT applies.

Country on the order form

To preselect your country, the order form looks up the country of your IP address in a local database. The address is not stored and is not sent to anyone else. You can change the country. This product includes GeoLite2 data created by MaxMind, available from maxmind.com.

What you type on the order form

While the order form is open, your entries are kept in your browser tab (session storage) so that a refresh does not lose them. They stay on your device, are not sent to us until you submit the form, and disappear when you close the tab. No cookie is used for this.

Discount requests

If you ask for a discount by sharing a post about DoubleSync, we keep your name, email address and the link to your post, so that we can check it and send you a code.

Licence checks

A DoubleSync site with a paid licence contacts doublesync.io about once a day. The request carries a fingerprint of the licence key and the host name of the site. We use it to confirm that the licence is still valid and to spot a key being used on sites it was not issued for. It does not include any content from your Umbraco site.

Your content

DoubleSync does not send your content to us. When you sync between your own Umbraco sites, the data goes directly from one of your sites to the other. We have no access to it.

Our website

Our web server keeps standard access logs (IP address, the page requested, browser type) for security and to find faults. We also use analytics and advertising tools, but only if you agree to them first: see section 5.

3. How long we keep it

Invoices and the data on them are kept for as long as Portuguese tax and accounting law requires. Contact messages are kept for as long as we need them to answer you and for a reasonable time afterwards. Licence check records are kept while the licence is active. You can ask us to delete your data at any time. We will do it unless the law requires us to keep it.

4. Where your data is stored and who handles it

doublesync.io, its database and its sign-in run on servers that we manage ourselves, at OVHcloud. We use these other services:

  • Mailgun (EU region) sends our emails, such as order confirmations and licence delivery.
  • Stripe processes card payments when you pay by card. We never see or store your full card number. Payment by bank transfer does not involve Stripe.
  • Cloudflare provides DNS for our domains.
  • European Commission VIES is the public service we use to check EU VAT numbers.

We do not sell your personal data and we do not share it for advertising.

5. Cookies and tracking

When you first visit, a banner asks what we may use. Until you choose, only the essential items below run. You can change your mind at any time from the small icon in the bottom corner of any page.

Essential — always on

These make the site work and cannot be switched off. They do not profile you and are not shared with anyone.

  • Language — remembers which language you picked.
  • Signing in — keeps you signed in to your account.
  • Payment security — set by Stripe on the payment step, to spot fraud.
  • Your cookie choice — so we do not ask again on every page.
  • Where you came from — if you arrived from one of our adverts, we keep the advert click reference for 90 days so we can tell which advert led to a sale. It is our own record, it is not read by anyone else, and it does not identify you.

Analytics — only if you agree

  • Google Analytics — which pages are read and where people leave. Data goes to Google.
  • Microsoft Clarity — records your visit, including mouse movement, clicks and scrolling, so we can see where the site is confusing. Text you type into form fields is masked before it leaves your browser, so we do not see what you write. Data goes to Microsoft.

Advertising — only if you agree

  • Google Ads — measures which adverts bring people here.
  • Meta pixel — the same, for adverts on Facebook and Instagram.
  • LinkedIn Insight Tag — the same, for adverts on LinkedIn.

If you refuse, these tools still receive a signal saying you refused, without cookies and without anything that identifies you. That is how we are told the refusal was registered.

Google, Microsoft, Meta and LinkedIn are in the United States. Where data reaches them it is transferred on the basis of the European Commission's standard contractual clauses and the EU-US Data Privacy Framework.

We also tell Google Ads when a licence is bought, from our own server rather than from your browser. That message carries the advert click reference and the amount, and no name or email address.

6. Your rights

Under the GDPR you have the right to:

  • see the personal data we hold about you
  • have wrong data corrected
  • have your data deleted
  • receive your data in a portable format
  • object to how we use it

To use any of these rights, write to us. If you are not happy with our answer, you can complain to the Portuguese data protection authority, the CNPD (cnpd.pt).

7. Contact

For anything about privacy, write to support@double-shore.com.