Privacy policy

Last updated: 4 October 2026

In short

• Our website uses no cookies and no tracking. We count visits without identifying anyone.
• Challenge boards store only what a challenge needs: a display name, a team and the scores people log. No accounts, no passwords.
• Boards are hosted in the EU (Frankfurt, Germany) and deleted 30 days after the plan ends.
• We never sell personal data and never use it for advertising.

1. Who is responsible

High Fives is a service of e-campaigne.me, Van Everdingenstraat 22, 5643 VB Eindhoven, the Netherlands, KvK 99381435 ("we"). For the website, demo requests, orders and invoices, we are the controller of your personal data. For the data of participants on a board, the organisation that runs the board is the controller and we process that data on its behalf, under our data processing agreement (see section 5). Questions: info@highfives.team.

2. Visiting our website

• No cookies. www.highfives.team sets no cookies and stores nothing in your browser, so there is no cookie banner.
• Visitor statistics. We use Cloudflare Web Analytics to count visits, pages and the sites visitors come from. It works without cookies and without identifying you, and we only see totals.
• Hosting. The website is served by Cloudflare. Like every web server, it briefly processes technical data such as your IP address to deliver the pages and protect them against attacks.
• Fonts are served from our own website, not from Google, so loading them doesn't share your IP address with anyone.

3. Requesting a demo

When you request a demo, we receive your name, work email address, company, your message and whether you'd like our newsletter. We use this only to plan the demo and to answer you; the legal basis is your request. The form is sent by email through Resend and arrives in our mailbox at Google Workspace. We keep demo requests for up to 2 years after our last contact, unless you become a customer.

If you tick the newsletter box, we may send you occasional tips and news about High Fives, based on your consent. Every newsletter has an unsubscribe link, and you can also simply ask us to stop.

4. Ordering a plan

• Payment: Stripe processes your payment, billing name and address, email address and, if you enter it, your VAT number. We never see or store your card details.
• Your board: we store your organisation's name, your email address and the details of your plan with your board, to run it, renew it and help you if you lose your access details.
• Email: we send your board's details (address, access code, admin PIN) by email through Resend.
• Invoices are kept for 7 years, because Dutch tax law requires it.

The legal basis is the agreement with you, and our legal obligations for invoices.

5. Taking part in a challenge board

A board is run by an organisation (usually your employer); that organisation decides what the challenge is and who takes part. We store and process the following on its behalf:

• the display name you choose and the team you join (a first name or nickname is fine);
• what you log: for example steps, active minutes, pages read, bingo squares or products sold, with the time of your latest entry;
• on a High Five wall: the high fives you send and receive, with the short message written for each and when it was sent;
• the board's settings, such as teams, colours, the reward and the link to the organisation's logo.

There are no accounts or passwords. The board uses one cookie that remembers that you entered the access code, and stores in your browser which participant you are, so you don't have to rejoin. Both are needed for the board to work. The organisation's logo is loaded from the address the organisation entered.

A board is deleted 30 days after its plan ends. The organisation can also reset its board at any time, which removes all participants and scores. If you want only your own data removed, ask the organisation or us, and we will remove it. For questions about your data on a board, contact the organisation that runs it; we'll help them, and you can always contact us as well.

6. Who processes data for us

We use these service providers. Each one may only use the data to provide its service to us.

• Render hosts the challenge boards and their database, in Frankfurt, Germany.
• Cloudflare serves the website and our domain names, counts website visits, and stores encrypted backups of the boards in the EU.
• Stripe handles payments and invoices.
• Resend sends our emails (welcome emails and demo requests), from the EU (Ireland).
• Google Workspace hosts our mailbox.

Some of these companies are based in the United States. Where data could be transferred outside the EU, this is covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

7. Backups and security

Boards are backed up every day. Backups are encrypted before they leave the server, stored in the EU and kept for up to 30 days, so deleted boards also disappear from our backups within that time. Admin PINs are only stored in hashed form, all connections are encrypted (HTTPS), and access to the systems is limited to us.

8. Your rights

You can ask us to see, correct or delete your personal data, to limit its use, to receive it in a portable form, or object to its use, and you can withdraw consent at any time. Email info@highfives.team; we'll reply within a month. If your data is on a board, we may forward your request to the organisation that runs it. If you're not satisfied with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Changes

We'll update this policy when our service changes. The date at the top shows the latest version; important changes are announced to our customers by email.