Privacy Policy
Effective date: February 2026
We-Amp B.V. ("we", "us") operates modpagespeed.com and provides the ModPageSpeed 2.0 software. This policy explains what data we collect, why, and what rights you have.
Who we are
We-Amp B.V. is a company registered in the Netherlands (KvK: 57898138). Registered address: Margaret Krophollerlaan 11, 1902 MA Castricum, the Netherlands.
For privacy-related questions, contact us at privacy@modpagespeed.com.
What we collect
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address | License delivery (trial or paid) | Contract performance (Art. 6(1)(b) GDPR) | Duration of subscription + 90 days |
| Email hash (SHA-256) | Trial deduplication | Legitimate interest (Art. 6(1)(f) GDPR) | 90 days |
| IP address | Rate limiting, abuse prevention | Legitimate interest (Art. 6(1)(f) GDPR) | In-memory only (not persisted) |
| Terms acceptance timestamp | Legal proof of acceptance | Legal obligation (Art. 6(1)(c) GDPR) | 5 years (Dutch limitation period) |
| FastSpring subscription ID | License management, renewal | Contract performance (Art. 6(1)(b) GDPR) | Duration of subscription + 90 days |
We do not use cookies, tracking pixels, or analytics scripts on this website. The web
console (self-hosted on your server) uses sessionStorage
for authentication tokens — no cookies are set.
How we process your data
When you start a trial or activate a paid license, your email address is used to generate an Ed25519-signed license token. The token is delivered to you immediately and stored alongside your subscription record.
To prevent duplicate trial usage, we store a one-way SHA-256 hash of your email. The original email address is not retained for trial deduplication — only the irreversible hash.
The ModPageSpeed 2.0 software itself runs entirely on your servers. It does not send data to us. License validation is offline (Ed25519 signature check, no phone-home).
Third parties
FastSpring (FastSpring, Inc., Santa Barbara, CA, USA) is our Merchant of Record. When you make a purchase, FastSpring processes your payment information, name, and email address under their own privacy policy. FastSpring participates in the EU-US Data Privacy Framework. See FastSpring's privacy policy.
We do not share your data with any other third parties. We do not sell personal data.
International transfers
Our servers are located in the European Union. The only cross-border transfer is to FastSpring (USA) during payment processing, covered by their EU-US Data Privacy Framework certification.
Your rights
Under the GDPR, you have the right to:
- Access (Art. 15) — request a copy of the data we hold about you
- Rectification (Art. 16) — correct inaccurate data
- Erasure (Art. 17) — request deletion of your data
- Portability (Art. 20) — receive your data in a structured format
- Object (Art. 21) — object to processing based on legitimate interest
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise any of these rights, email privacy@modpagespeed.com. We will respond within 30 days.
Data security
We use HTTPS for all web traffic. License tokens are signed with Ed25519 (not encrypted secrets). Email hashes use SHA-256. Data files are stored on encrypted volumes with restricted access.
Children
ModPageSpeed 2.0 is a B2B server infrastructure product. We do not knowingly collect data from anyone under 16. If you believe we have, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email at least 30 days before they take effect. The effective date at the top of this page will be updated accordingly.
Contact
For privacy questions or data subject requests: privacy@modpagespeed.com
For general questions: hello@modpagespeed.com