Terms of service

cmshark is sold to businesses only. The customer must be a company or other legal entity acting in the course of its business. Danish and EU consumer protection rules on distance selling therefore do not apply.

The person who accepts these terms confirms that they are authorised to bind the customer.

cmshark provides a cookie banner, automatic blocking of known trackers, Google Consent Mode signals, cookie scanning and classification, a consent log, statistics, compliance checks and, on some plans, an API and webhooks, as described on cmshark.com at the time of ordering.

cmshark is a tool. It does not provide legal advice, and using it does not by itself make the customer compliant with the GDPR, the ePrivacy rules or other law. The customer remains responsible for its own website, its cookie and privacy policies, the texts it chooses within the banner, and for categorising cookies correctly.

We may improve and change the service. We will not remove a core function of a paid plan during a running billing period.

Every plan can be tried free of charge for 30 days. No payment card is required. The trial ends automatically after 30 days unless the customer chooses to continue on a paid plan.

If the trial is not continued, the customer's sites stop serving the banner and the account and its data are deleted 30 days after the trial ended. The customer can export the consent log before then.

Prices are stated per month in EUR excluding VAT and appear on cmshark.com/pricing. VAT and similar taxes are added where applicable.

Plans are priced by the number of websites. A website is one domain where the banner runs. Pages, page views and consents are not limited on any plan.

We may change prices with at least 30 days' written notice by email. A price change takes effect from the first billing period after the notice period. The customer may cancel before the change takes effect.

Paid plans are billed monthly in advance. Payment is due within 14 days of the invoice date unless another payment method has been agreed.

If payment is more than 14 days overdue, we may send a reminder and, if payment is still not received 14 days after the reminder, suspend the service until payment is made. Danish interest on late payment applies.

Fees already paid are not refunded, except where these terms say otherwise.

Subscriptions run month to month with no minimum term. The customer can cancel at any time by email to hey@cmshark.com. Cancellation takes effect at the end of the month in which it is received.

We may cancel a subscription with 3 months' notice. We may terminate immediately if the customer materially breaches these terms, including non-payment after suspension, or uses the service unlawfully.

When a subscription ends, the banner stops working on the customer's sites. The customer can export the consent log until the end of the subscription. Data is deleted 30 days after the subscription ends, unless the law requires us to keep it.

The customer must install the snippet as described in the setup guide, keep its login credentials secret and make sure only authorised persons use the account.

The customer may not use cmshark to break the law, to disguise tracking that it has not disclosed, or in a way that harms the service or other customers.

For consent records and other personal data processed on behalf of the customer, the customer is the data controller and cmshark is the data processor. This section and the customer's instructions given through the platform form the data processing agreement under Article 28 GDPR.

We process personal data only to provide the service and on the customer's documented instructions. Visitor IP addresses are truncated before storage (IPv4 to /24, IPv6 to /48). Consent records are kept for 5 years by default, or for the retention period the customer sets, and are then deleted automatically.

Our staff with access to the data are bound by confidentiality. We take appropriate technical and organisational measures, including encrypted connections and access control.

Data is stored in the EU. We use Hetzner Online GmbH (Germany) as hosting provider. We will notify the customer at least 30 days before adding or replacing a sub-processor; the customer may object and cancel if it does not accept the change.

We will assist the customer with data subject requests and with its obligations under Articles 32 to 36 GDPR to the extent reasonable, and notify the customer without undue delay after becoming aware of a personal data breach.

At the end of the agreement we delete the customer's personal data as described in section 6, after the customer has had the opportunity to export it.

We aim for high availability but do not guarantee uninterrupted service. If the service is unavailable, the banner is designed to keep serving the last known configuration, and trackers stay blocked.

Support is provided by email at hey@cmshark.com on Danish business days.

Our total liability under these terms is limited to the fees the customer paid in the 12 months before the event giving rise to the claim. We are not liable for indirect loss, including lost profit, lost data, loss of goodwill, or fines and claims from authorities or third parties against the customer.

The limitations do not apply to loss caused by gross negligence or intent.

Neither party is liable for failure caused by circumstances beyond its reasonable control (force majeure).

We may change these terms with at least 30 days' notice by email. Changes do not apply to a billing period that has already started. If the customer does not accept a change, it may cancel before the change takes effect.

These terms are governed by Danish law. Disputes are settled by the Danish courts, with the Copenhagen City Court (Københavns Byret) as the court of first instance.

If the Danish and English versions differ, the Danish version prevails.