Privacy policy
Last updated 1 September 2026
This policy covers the personal data we collect through lowroller.ai and what we do with it. It does not cover the advertising campaigns we run for clients — that data is governed by the contract with the client in question, and we describe it separately below.
Who is responsible
Passing Bytes AB (Swedish company registration number 556805-2558), trading as LowRoller, is the controller for the data collected through this site. You can reach us at sales@lowroller.ai for anything to do with this policy.
What we collect
When you send a brief. The contact form collects your name, email address, company, markets, the channels and budget range you select, and whatever you write in the message field. If you send a scenario from the CPM calculator, the assumptions and the figures shown on screen are sent with it so we can reply about the right calculation. Nothing is pre-filled or collected silently.
When you email us. Your address and the contents of the correspondence.
When you visit. Our host records standard server and security logs, including IP address, browser type and the pages requested. If analytics is switched on, we also collect aggregate usage data — pages viewed, approximate location at city level, device type, and whether a form was submitted.
Why we use it, and on what legal basis
We use what you send through the form — including any calculator assumptions you choose to send with it — to answer you, quote your brief and, if it goes anywhere, to run the campaign. The legal basis is our legitimate interest in responding to a business enquiry, and, once there is a booking, performance of a contract. We keep server logs to run the site securely, which is also a legitimate interest. Analytics runs on consent where consent is required.
We do not sell your details, we do not add you to a mailing list without asking, and we do not use enquiry data to target you with advertising.
Cookies
The site sets no marketing or advertising cookies. Analytics cookies, which count visits and record whether a form was submitted, are set only if you accept them in the banner shown on your first visit. Until you choose, nothing is stored on your device beyond what is needed for the site to work. You can change your mind at any time through the cookie settings link in the footer, and the site works normally either way.
Who else sees it
We use a small number of processors to run the site: Vercel for hosting, Resend for delivering form submissions to our inbox, our email provider, and, when enabled, Google Analytics for usage measurement. They process the data on our instructions only. Some are based outside the EU/EEA, in which case transfers rely on the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep it
Enquiries that go nowhere are deleted within 24 months. Correspondence and records tied to a booked campaign are kept for as long as the client relationship lasts and then for the period accounting law requires. Server logs are kept for a short retention window set by our host.
Campaign data
When we buy media for a client, the campaign runs on our seats at the demand-side platforms we use. Those platforms process advertising identifiers and inferred audience data under their own terms and privacy notices. Where a client asks us to use their audience data, we act as their processor under the agreement between us. We do not build or sell audience data of our own.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct or erase it, ask us to restrict how we use it, object to processing based on legitimate interests, or ask for your data in a portable format. Write to sales@lowroller.ai and we’ll deal with it within a month. If you are not happy with how we handle it, you can complain to your national data protection authority — in Sweden that is Integritetsskyddsmyndigheten (IMY).
Changes
If this policy changes we update the date at the top. Material changes will be described on this page rather than made quietly.