Last updated May 2026
Soostone Inc. (“us,” “we,” “our,” or “Company”) has created the following Privacy Policy to describe how the Widengle platform handles data when you visit a website operated by one of our clients on which Widengle is deployed (and any related mobile applications). For data-protection purposes, each of our clients is the controller of the data collected on its website (each, a “Controller”), and Soostone acts as that Controller’s processor (or, under applicable U.S. state laws, its service provider).
Soostone provides real-time decisioning, analytics, and optimization services (collectively, the “Services”) to our clients, who deploy the Widengle platform on their websites. In this capacity, we process data from visitors to those client websites on behalf of, and under instruction from, the relevant Controller. While we do not publicly disclose which clients use Widengle, we are committed to transparency regarding how this data is handled across all of our deployments.
This Privacy Policy describes, among other things, the types of information we collect about you when you visit websites operated by our clients on which Widengle is deployed, how we use it, and how you can opt out of data collection. This policy describes our cross-client baseline practices only; where it and an individual Controller’s own privacy policy address the same subject, the Controller’s policy governs your relationship with that website.
We help websites across the world improve their customer experience, effectiveness and performance through methods that do not rely on using any personal data. Our Widengle technology platform helps us achieve this goal by collecting, processing, storing and handling data with clear guidelines governing data privacy and an express goal of avoiding dependence on personal elements of data in making websites maximally effective.
This document provides details on key aspects and policies implemented in Widengle that govern its data handling processes.
Privacy is important to us, and so is being transparent about how we collect, use, and share information about you as a website visitor. This policy is intended to help you understand:
Information we collect automatically when Widengle is deployed on a website.
We collect anonymous information about general characteristics of activity and devices used for browsing on websites where our Widengle platform is deployed. The standard fields are:
In addition, Widengle collects various business-specific e-commerce fields that typically include:
These fields differ from website to website, but do not contain personally identifying information.
Business-specific identifiers, such as a database account ID, are hashed using a cryptographic function (such as SHA-256, applied with a per-Controller salt where appropriate) before being stored on our systems, so that Soostone cannot recover the original identifier from the hash alone. For example, a purchase ID of 1234 would be stored as 1be168ff837f043bde17c0314341c84271047b31 with no way for us to reproduce the original 1234.
We automatically truncate IP addresses prior to storage, as required for compliance with the local laws and regulations, as well as the wishes of the website’s owners on which we are deployed. Full IP addresses are stored in logs.
Cookies are a commonplace web technology that enables websites to preserve state and offer a consistent experience to their users over time. Widengle uses cookies to support its functionality of personalizing content to website user behavior. Cookies set by Widengle are used only for the business logic governing visitor experience on the pages of a given website. To opt out, enable Global Privacy Control in your browser (or use a browser extension that sends the Sec-GPC header); Widengle honors these signals automatically and will stop setting and reading its cookies on subsequent requests. See Section VII.A for details.
Widengle uses cookies to support its functionality. These cookies are:
We do not receive any personal information from 3rd party partners.
Widengle is designed to operate without the categories of information traditionally treated as Personally Identifying Information (PII) — names, email addresses, phone numbers, precise location, and similar directly identifying attributes — and we do not seek to identify any individual. Certain data we process, however, including truncated IP addresses, full IP addresses retained in security logs (see Section II.B), and the persistent cookie identifier described in Section II.C, may be treated as “personal data” under laws such as the EU General Data Protection Regulation. We process this data only as described in this policy and only on behalf of the relevant Controller; we never combine it with directly identifying information.
Specifically:
We use the information collected for the purposes of enhancing the website experience and capabilities, improving our platform features, and performing the analyses needed to support those efforts. Information processed by Widengle is handled automatically by our software in service of the relevant Controller. Any research and development efforts that use the collected data are performed by a limited group of authorized Soostone employees subject to strict confidentiality obligations. Widengle’s automated decisions affect content presentation only — for example, products recommended, pricing displayed, or page personalization — and do not produce legal or similarly significant effects on individuals within the meaning of Article 22 of the GDPR.
Widengle is a first-party-only analytics platform that processes information from each website in complete isolation. This means:
Soostone does not share, sell or otherwise disseminate data collected from its client websites.
We use established enterprise cloud hosting providers in the United States to store, host, and process information collected through Widengle. By default these providers are Amazon Web Services and Google Cloud, each engaged as a sub-processor under a written data-processing agreement. A specific deployment may use additional regions or providers where required by a Controller’s contract or applicable law.
As a default, and except as otherwise required by applicable law or the individual terms of a given Controller’s agreement with Soostone, we retain collected non-personal data indefinitely to preserve analytics continuity across deployments. Where a Controller’s contract or instructions specify a shorter retention period, or where applicable law requires deletion, that period governs and supersedes the default described here. Full IP addresses collected for security logging purposes are retained for one year.
You have certain choices available to you when it comes to your interaction with our systems. Below is a summary of those choices, how to exercise them and any limitations.
Some browsers have incorporated "Global Privacy Control" (GPC) features that can send a signal to the websites you visit indicating you do not wish to be tracked. We honor any GPC headers, or navigator.globalPrivacyControl setting, and will immediately block all tracking and collection of user data. Using a third party extension to include Sec-GPC header in requests will similarly be honored.
You may choose to disable cookies functionality in your browser settings, further eliminating our platform’s ability to personalize content.
We collect information globally and store that information in the United States. All data is in encrypted form during transit via SSL encryption implemented in all modern web browsers.
Information collected through Widengle is stored and primarily accessed in the United States. Visitors located in the European Union, European Economic Area, and United Kingdom are automatically opted out of data collection at the point of request (see Section IX), so personal data subject to those laws is not collected, retained, or transferred internationally by Widengle. Where Soostone personnel located outside the United States access information for engineering, support, or operations purposes, such access is performed under Soostone’s written confidentiality and data-handling controls.
Soostone automatically uses geo IP lookups to identify countries that are in the European Union, European Economic Area, or the United Kingdom. Users in these countries will automatically be opted out from data collection, tracking and any analytics.
Widengle is licensed for use by organizations that operate websites. Please direct your data-privacy questions to the operator of the website on which you encountered Widengle (the relevant Controller), as your interaction with that website is governed by that organization’s own privacy policy. We are not responsible for the privacy or security practices of our clients’ websites, which may differ from this policy.
For any given website, please contact the organization’s administrator that controls such a website or refer to such organization’s policies for more information.
We may change this privacy policy from time to time. We will post any privacy policy changes on this page. We will also keep prior versions of this Privacy Policy in an archive for your review. We encourage you to review our privacy policy whenever you use our platform to stay informed about our information practices and the ways you can help protect your privacy.
If you disagree with any changes to this Privacy Policy, you may opt out of data collection at any time by enabling Global Privacy Control in your browser (or by using a browser extension that sends the Sec-GPC header); Widengle honors these signals automatically. See Section VII.A.
Any information collected by Widengle is controlled by Soostone, Inc. If you have questions or concerns about how your information is handled, please direct your inquiry to:
Soostone Inc
115 Broadway
3rd Floor
NY, NY, 10006
Email: privacy@soostone.com
Last Updated: 12 May 2026
