Last updated: June 26, 2026. This policy explains how we handle personal information for FieldValue at fieldvalue.xsupra.io. FieldValue is operated from Germany; your data is processed in the European Union, and both EU (GDPR) and U.S. state privacy laws (such as the CCPA/CPRA for California residents) inform the rights described below.
We do not sell or share your personal information. We use a small number of service providers (such as our login and payment processors) strictly to run the service.
The data controller is XSUPRA GmbH, Mansfelder Strasse 1, 06108 Halle (Saale), Germany — email hello@xsupra.io. Full company details: Company & Contact.
| Category | Examples | Purpose |
|---|---|---|
| Account data | Email address, authentication identifier (via Auth0) | Create and secure your account, sign-in |
| Order data | Purchased field identifier, amount, currency, payment status, timestamp | Deliver and document purchases; support |
| Payment data | Card details are entered with and processed by Stripe — we do not receive or store full card numbers | Process one-off payments (USD) |
| Usage & analytics | Cookieless, aggregated page metrics; truncated IP | Understand traffic and improve the site |
| Server logs | IP address, request time, user agent | Security, abuse prevention, troubleshooting |
| Map & search | Place searches sent to OpenStreetMap Nominatim; map tiles from OpenStreetMap | Locate and display fields you look up |
We do not sell or share your personal information for cross-context behavioral advertising, and we do not use it for advertising profiling.
Our analytics (Matomo) runs without cookies and does not track you across other sites. Signing in stores authentication tokens in your browser so you stay logged in; these are strictly necessary for the service. We do not use advertising or third-party tracking cookies.
These providers process data only on our instructions or as needed to deliver their service.
FieldValue is hosted and operated in the European Union. If you access the service from the United States, your information is transferred to and processed in the EU under appropriate safeguards. Stripe and Auth0 may process certain data in the United States under their own compliance frameworks.
Account and order records are kept while your account is active and as required for tax, accounting and legal purposes (typically several years for transaction records). Server logs are kept for a short period for security. Aggregated analytics contain no identifying data.
Depending on where you live, you may have the right to:
To exercise any right, email hello@xsupra.io. You may also delete most data directly by closing your account. EU/EEA users may lodge a complaint with a supervisory authority.
FieldValue is a professional tool not directed to children, and we do not knowingly collect personal information from anyone under 16.
We use encryption in transit (HTTPS), access controls and reputable processors. No method of transmission or storage is completely secure, but we work to protect your information.
We may update this policy; we will revise the "last updated" date above and, where appropriate, provide further notice.
Map (United States) · Terms of Service · Company & Contact · Data sources & licenses