Legal

Chakloon Legal Terms

The terms for site owners who build legal documents and use the cookie consent widget of Chakloon Legal, including the data processing terms for the consent log of their visitors.

Version 1.0In force from October 16, 2026Updated: October 16, 2026All versions

These terms apply to Chakloon Legal at legal.chakloon.com, a service of Haydamax OÜ, Estonia. They supplement the general Terms of Service and the Privacy Policy and do not replace them. Where these terms say something more specific about Chakloon Legal, they prevail for this service.

Chakloon Legal helps you assemble legal documents for your own website. You answer a questionnaire, and the service builds documents from your answers. Chakloon Legal also offers a cookie consent widget for your website. The widget is free.

You use Chakloon Legal with your Chakloon Passport account. If you act for a company or another organisation, you confirm that you are authorised to do so.

Chakloon Legal is a tool, not a law firm. Nothing in the service, in the documents it builds or on this page is legal advice, and using the service does not create a lawyer and client relationship between you and us.

The documents are templates. They are built only from your answers, they cannot take into account every circumstance of your business, and the law may change after a document is built. Read every document before you publish it, keep it up to date, and ask a lawyer if your situation is complex or the stakes are high.

Your responsibilities as a site owner

As the site owner you are responsible for:

  • giving true and complete answers in the questionnaire;
  • choosing which documents to use and adapting them to your website;
  • publishing the documents and keeping them current;
  • the compliance of your website with the law, including data protection, consumer protection and the rules on cookies;
  • configuring the widget so that it matches what your website actually does.

You may use and adapt the documents built for you on your own websites.

Domain proof

To connect a website to Chakloon Legal, you prove that you control its domain by adding a DNS TXT record that the service shows you. Connect only domains that you own or are authorised to manage. If you lose control of a domain, its connection to your account may be removed.

The widget shows visitors of your website a choice about cookies and similar technologies and records their choice. It helps you ask for consent, but whether your website needs consent, for which purposes, and whether your website respects the choice, is up to you.

Storage used by the widget

To remember the choice of a visitor, the widget stores it in the local storage of the visitor's browser, under a key made of chakloon_legal_consent_ and the identifier of your site: the consent identifier, the version of the banner settings, the choices and the time. This entry has no expiry date and stays until the visitor clears the site data in the browser. The widget sets no cookie. This storage is strictly necessary to provide the function the visitor asks for, which is to remember the choice, and therefore does not itself require consent under Article 5(3) of Directive 2002/58/EC and the Estonian Electronic Communications Act. It is used only for this purpose.

Roles

The widget keeps a log of the consent choices of your visitors, so that you can show that consent was given. For the personal data in this log you are the controller and Haydamax OÜ is your processor. The terms below form the data processing agreement under Article 28 GDPR between you and us. They apply as long as we keep a consent log for you.

Data processing terms

  • Subject matter, nature and purpose. Keeping the consent log of your website, so that you can prove the choices of your visitors and comply with your obligations.
  • Personal data and data subjects. The consent events of the visitors of your website. For each event the log records: a consent identifier (a random UUID created in the visitor's browser); the version of the banner settings; the type of event: consent given, changed or withdrawn; the choice for each category: necessary (always on), functional, analytics and marketing; the domain of the page where the choice was made, without its path; the first 32 characters of the SHA-256 hash of the browser user-agent; the time of the event. The log contains no IP addresses.
  • Retention. The log is kept while the website is in your cabinet. As controller you decide how long the records are kept, and you can ask us to delete them by writing to privacy@chakloon.com.
  • Access and export. In the cabinet you see the last 500 events, and you can export up to the last 10 000 events as a CSV file.
  • Instructions. We process the data only on your documented instructions, which are your settings in the service and these terms, including with regard to transfers to third countries. We do not transfer the data outside the European Economic Area unless the law requires it, in which case we inform you first where the law allows. We tell you if we believe an instruction breaks the law.
  • Confidentiality. People who process the data for us are bound by confidentiality.
  • Security. We protect the data with appropriate technical and organisational measures under Article 32 GDPR, including encrypted connections and limited access.
  • Sub-processors. You give us a general authorisation to use sub-processors. We use Hetzner Online GmbH for servers and object storage in Germany and Finland. We tell you in advance about any new sub-processor for this processing, and you may object. Each sub-processor is bound by the same data protection obligations, and we remain responsible to you for its work.
  • Requests of data subjects. We help you, as far as we can, to answer requests of your visitors under Chapter III GDPR. If a visitor writes to us about the log of your website, we pass the request on to you.
  • Assistance with your obligations. We help you, taking into account the nature of the processing and the information we have, to meet your obligations under Articles 32 to 36 GDPR on security, breach notification, impact assessments and prior consultation.
  • Personal data breaches. We notify you of a personal data breach that affects your consent log without undue delay after we become aware of it, with the information we have.
  • End of processing. When you stop using the widget for a website or close your account, we delete the consent log of that website or, at your choice, return it to you, and delete the remaining copies, unless Union or Member State law requires us to keep them.
  • Information and audits. We give you the information needed to show compliance with Article 28 GDPR and allow audits, including inspections, by you or an auditor you appoint, with reasonable notice and confidentiality.

Your visitors and us

Your privacy policy must tell your visitors about the consent log and name Haydamax OÜ as your processor. For their own Chakloon Passport accounts, if they have one, we remain the controller, as set out in our Privacy Policy.

Acceptable use

You must not use Chakloon Legal to build documents for websites that you do not own or manage, to give your visitors misleading information, or to make the widget record a consent that the visitor did not give. The Community Guidelines apply. We may suspend accounts that break these rules, as described in Content moderation and appeals.

Liability

The documents and the widget are provided as they are. We do not check your answers, your website or whether it complies with the law, and we are not responsible for fines, claims or other consequences that follow from the content of your website, your answers or the documents you publish. Our liability is governed by the Terms of Service. Nothing in these terms limits liability that cannot be limited by law.

Contact

Haydamax OÜ, registry code 17351554, Narva mnt 5, 10117 Tallinn, Estonia.