Privacy policy
Updated on 21 September 2026
This page explains how Retzef works with information. It is not legal advice. For questions about your account, write to privacy@retzef.io.
Who we are
Retzef is a system for measuring customer journeys. The public site is retzef.io, the dashboard is app.retzef.io, and collection runs on api.retzef.io and t.retzef.io. We operate from Israel. The server sits in Germany at Hetzner.
Two separate information systems
Marketer or admin login accounts: Retzef is the database controller. That covers email, name, hashed password, role, and two factor if it is turned on.
Measurement of visitors on a customer site: the business customer is the database controller, and Retzef processes on their behalf. End customers stay anonymous in the interface. There is no person card and no email search on the work screens.
Demo requests
The public demo form collects name, work email, company, and an optional phone number. We use those details only to schedule a demo. We do not add them to a marketing list and we do not sell them.
What is collected
- Events from the snippet on the customer site: visit, scroll, form, video view, and page address.
- A visitor cookie named _rtz_vid, and an active business cookie rtz_ws.
- A click from a tracking link, including ad platform click IDs.
- An end customer email if a truth system or a form reports it. The email is encrypted at rest, and for external matching it leaves only as a SHA-256 hash.
- A raw IP address is not stored. A coarse region may be derived, then the address is dropped.
- Probabilistic fingerprinting is off by default, and can stay off.
Ad platforms
A connection to Meta, Google, TikTok, Taboola, or LinkedIn is read only: daily spend. Retzef does not publish ads and does not edit a campaign for you. Outbrain is not offered.
Meta conversion reporting is off for every business. It turns on only after an explicit switch in the interface, and it can be turned off at any time. Only conversion counts and hashed email are sent, never ad creative.
Consent and cookies
Until consent is given on the customer site, the snippet is meant to collect only anonymous aggregate data without a cookie. The business customer is responsible for the consent banner on their property.
Dashboard sign in requires an account. Sign up is consent to this policy and to the terms of use.
Retention, security, and transfer abroad
Raw events are kept for 24 months by default. Passwords and secret content are encrypted. The server is in Germany. Connecting an ad platform sends matching data to the United States or to the region where that platform processes, and only after an explicit connection or switch.
Rights under the Israeli Privacy Protection Law and Amendment 13
You can ask to review, correct, or delete. We reply within 30 days. Deleting an end customer removes events and payments within 30 days of the request. Write to privacy@retzef.io. If we find a breach that poses a risk, we notify the Privacy Protection Authority within 72 hours, and we notify affected people without undue delay when the risk is high.
The service is not meant for anyone under 18.
Processors
Hosting: Hetzner in Germany. Sign in can also use Google. Ad platforms enter only if you connect them. Transactional email for demo requests and connection notices uses Resend. We do not sell people lists.