Privacy statement
Scope and contact
This statement covers the Traffik.nz public website, our free browser tools, digital product sales, enquiries, and the proposed read-only TikTok account connection used by our authorised operators. Traffik AI Web Optimisation Limited, Christchurch, New Zealand, operates this website. It does not describe all information processed inside customer deployments of Pitlane, Jess, or other services; those require their own service-specific notices. For a privacy enquiry, contact Stephen Guckert at steve@traffik.nz.
Free image tools
Our image tools (for example the image resizer, NZ passport photo resizer and resize-to-100 KB tool) process your images in your own browser. Your images and file names are not uploaded to or stored by Traffik, and are never sent to Google Analytics. If you accept analytics cookies, we count that a tool was used and which tool it was (see Analytics).
Purchases
Digital products are sold through Stripe. Stripe collects your payment details and email address; we receive your name, email, what you bought and the payment status, and use it to deliver your files, answer support and refund requests, and keep business and tax records (generally seven years, as required by New Zealand tax law). We never see your full card number. Stripe's privacy policy: stripe.com/privacy
Analytics (Google Analytics 4)
We use Google Analytics 4, a service provided by Google LLC, to understand how our website is used: which pages and tools are visited, how people find us (for example from a search engine or social media), roughly where visitors are (country and city, worked out from the IP address), the type of device and browser, and whether someone clicks through to checkout. We use this only to improve the site and our tools. We don't use it to identify you, we don't send Google your name, email or images, and we've turned off Google signals and data sharing with Google for other purposes. We don't use remarketing or ad personalisation. Google says Google Analytics 4 doesn't log or store IP addresses.
Google acts as our service provider and processes this information on our behalf. More about how Google uses this information: policies.google.com/technologies/partner-sites
Your choice. Analytics cookies are off until you click Accept on our cookie notice. If you click Decline, or don't choose, no analytics cookies are set. Google may still receive basic, cookieless signals that a page was viewed (such as the time, page, browser type and that consent was declined), with no cookie or identifier that recognises you on a later visit; we use these only as overall totals. We keep detailed analytics data for 2 months; after that only summary reports remain.
Google Ads measurement. The Google tag on this site is also linked to Traffik's Google Ads account (tag AW-17639840469), so we can measure whether our own Google ads lead to visits and purchases. Ad personalisation and ad signals are denied by default. Analytics cookies are only set after you click Accept; Google Ads cookies stay off even then, because we don't currently use ad cookies or remarketing. Before you choose, Google Ads may receive the same cookieless signals described above.
Cookies and similar technology
- _ga and _ga_[ID] (Google Analytics, only if you accept): tell visits apart and count returning visitors. They last up to 2 years.
- traffik_consent (stored in your browser's local storage, not a cookie): remembers whether you accepted or declined, so we don't ask on every page. It stays until you clear your browser data.
We don't use advertising cookies, including Google Ads cookies. If we add advertising in future, we'll update this page and ask for any consent needed before it goes live.
How to opt out or change your mind
- Click Cookie settings (also at the bottom of any page) and choose Decline. This removes our Google Analytics cookies from your browser.
- Install Google's opt-out add-on: tools.google.com/dlpage/gaoptout
- Block or delete cookies in your browser settings. The tools still work without cookies.
Where information is processed
Our website is hosted on a Hetzner server. Google, Stripe and Hetzner may store or process information outside New Zealand, including in the United States and the European Union, where privacy laws differ from New Zealand's. We use these providers to run our own website, and we choose providers that protect information in ways comparable to the Privacy Act 2020.
Website enquiries
The walkthrough form asks for your name, business name, phone number, industry, and service interest. These fields are required to submit the form. We use your enquiry to respond, arrange a walkthrough, and discuss the services you requested. You can contact us by email or phone instead. Please do not include patient records, tenant evidence, passwords, or other sensitive information in a general enquiry.
Technical information
The website is served from our Hetzner-hosted VPS. Requests necessarily send information such as your IP address and browser request details to the hosting service. The website also loads fonts from Google Fonts, which receives requests from your browser. We use technical information for website delivery, security, and fault investigation. This statement does not promise New Zealand-only hosting or processing.
TikTok connection — current development scope
The TikTok integration is being configured in a restricted development sandbox and is not currently operational. The planned Login Kit permission is user.info.basic, for account identity verification: account identifier, avatar, and display name. Access and refresh tokens are credentials used to maintain an authorised connection, not public profile content. No posting, upload, private-message, or video-publishing permission is part of this read-only configuration. Any broader use requires a revised disclosure and the account owner’s authorisation before activation.
Integration data use
The TikTok connection is limited to accounts our authorised operators control. We will not sell TikTok-derived information or use it to train AI models. Credentials must be kept in protected server storage and must not appear in public pages, chat, source code, or ordinary logs. Retention and deletion controls must be verified before the integration is activated.
Choice and disconnection
TikTok account connection is optional and separate from browsing this website or sending an enquiry. Review TikTok’s consent screen before approving a connection. You can revoke a connection through TikTok’s account settings and contact us to request deletion of information retained by our integration. Revocation stops future authorised access; it does not itself remove records already held by us.
Access, correction and complaints
You may ask us for access to personal information we hold about you and request correction. We may need to verify your identity proportionately before responding. Contact steve@traffik.nz with the subject Privacy request, and avoid sending passwords or access tokens. If you are unhappy with our response, you can contact the New Zealand Office of the Privacy Commissioner at privacy.org.nz.
Changes
We will update this statement when the website or authorised integration changes. New uses of information should be explained before the relevant collection or permission request.