Privacy policy
Last updated: 25 September 2026
This policy explains what personal data the website eisme.lt (“Eisme”) processes, why, how long we keep it and what rights you have. The Lithuanian version is the governing one; this is a translation.
1. Controller
42 Projektai, MB (“we”). Email info@simplify.lt – please use it for any privacy question.
2. Vehicle statistics are not personal data
Eisme shows aggregated statistics on vehicles registered in Lithuania, calculated from the open data of AB „Regitra“. Regitra publishes the data without names, plate numbers or VINs, and masks rare combinations that could identify an owner. We publish totals only: owner age groups and counties are shown only for models with at least 10 vehicles, and we never try to identify individual vehicles or their owners.
3. What we process and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Account: email address, password hash (never the password itself), login times. With Google sign-in: your Google account ID and email. | Creating your account and signing you in. | Contract (GDPR Art. 6(1)(b)). | Until you delete your account. |
| Premium subscription: subscription status, Stripe customer and subscription IDs, invoices. Card details are handled by Stripe only; we never receive them. | Providing premium, taking payments, bookkeeping. | Contract; legal obligation (accounting, Art. 6(1)(c)). | Subscription data while the account exists; accounting records for the period required by law (usually 10 years). |
| Connected apps (MCP): if you connect Claude, ChatGPT or another app – its registration details and access tokens. | Letting the app fetch statistics on your behalf. | Contract. | Until you disconnect the app or delete your account; tokens expire. |
| Emails to you: email address and message content. | Sign-in codes, email confirmation, important account and subscription notices. | Contract. | While the account exists. No marketing emails without separate consent. |
| Server logs: IP address, browser information, requested address and time. | Security, fixing errors, preventing abuse. | Legitimate interest (Art. 6(1)(f)). | Up to 30 days. |
| Usage statistics (Google Analytics): pseudonymous identifiers, pages visited, device and approximate location (country, city), actions on the site (e.g. search, starting a subscription). | Understanding how the site is used and improving it. | Your consent (Art. 6(1)(a)), given in the cookie banner. | Up to 14 months. |
| Your emails to us: email address and content. | Answering and resolving your question. | Legitimate interest. | Until resolved, at most 2 years. |
You can use the whole site without accepting statistics cookies. Account data is only needed to sign in or to buy premium.
4. Who receives data
We don't sell data. These providers process it on our behalf under contract:
- Google Cloud (Google Cloud EMEA Ltd., Ireland) – web servers in Belgium.
- Neon (Neon, Inc.) – database, servers in Frankfurt, Germany.
- Cloudflare (Cloudflare, Inc.) – delivering the site, attack protection, file storage.
- Stripe (Stripe Payments Europe, Ltd., Ireland) – payments. Stripe processes some payment data (e.g. for fraud prevention) as an independent controller: stripe.com/privacy.
- Google (Google Ireland Limited) – Google Tag Manager, Google Analytics (only with consent) and Google sign-in if you use it.
- CookieYes (CookieYes Limited, United Kingdom) – cookie consent management.
- An email delivery provider – sending sign-in codes and account emails.
Apps you connect to your account yourself (e.g. Claude by Anthropic, ChatGPT by OpenAI) receive only what they request on your behalf. They are independent controllers with their own privacy policies.
We may disclose data to public authorities where the law requires it.
5. Transfers outside the European Economic Area
Some providers (Cloudflare, Google, Stripe, CookieYes, apps you connect) may process data outside the EEA, e.g. in the USA or the UK. Such transfers rely on the European Commission's standard contractual clauses, the EU–US Data Privacy Framework or the Commission's adequacy decision (for the UK).
6. Your rights
You have the right to:
- access your data and get a copy;
- have inaccurate data corrected;
- have your data erased – you can delete your account yourself: Account → “Delete account”;
- restrict processing, and object to processing based on legitimate interest;
- receive your data in a portable format;
- withdraw consent at any time in the cookie settings (this doesn't affect processing before withdrawal).
Write to info@simplify.lt; we answer within one month. If you think your data is processed unlawfully, you can complain to the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt) or the authority in your country.
7. Children
Accounts are not intended for anyone under 14. Only adults may buy a premium subscription.
8. Automated decisions
We make no decisions based solely on automated processing that have legal or similarly significant effects on you.
9. Security
The site works over encrypted HTTPS only, passwords are stored only as hashes, and database access is limited to the people and systems that need it.
10. Changes
When we change this policy we update the date at the top. Account holders are told about significant changes by email.