Data is stored in Germany. No export to the US. No cookies. No third-party trackers. GDPR-compliant by design — not as an afterthought.
Fluister runs exclusively on European infrastructure. There is no scenario in which your feedback data leaves the EU.
Fluister collects as little as possible. No session tracking, no behavior profiles, no advertising cookies.
GDPR requires a cookie consent banner if you place tracking or marketing cookies. Fluister places no cookies. The widget only uses local browser storage (localStorage) to track the session — this falls outside the cookie definition of the ePrivacy Directive.
💡 Practical: you can add Fluister to your site without changing your cookie policy or consent flow.
Note: if you enable the optional email field for follow-up, you may fall under e-Privacy rules for direct marketing. Consult your legal advisor for your specific situation.
Who is responsible for which data? Here is the overview of processing responsibilities.
You determine why feedback is collected and what happens with it. You are responsible for your own privacy policy toward users.
Fluister processes data on your behalf. We follow your instructions and only process data for the agreed purposes.
Hetzner hosts the servers. As a German company, Hetzner falls fully under EU law. No data transfer outside the EU.
→ A Data Processing Agreement (DPA) is available upon request. Email privacy@fluister.dev.
Under GDPR, users of your site have rights regarding their feedback data.
Start free. No credit card. Data stays in Germany. Setup in 5 minutes.
Create free account →