Privacy policy

The controller of your data is [company name], [registration number], [address]. Questions about privacy go to [email]; we answer within one month.

Account: your email address, a hash of your password, the date you accepted these terms, and the number you rent. We never store the password itself.

Your page: everything you put on it, plus the files you upload.

Messages: the text visitors send you. Senders are anonymous to you, and to us they are a one-way code, not an address.

Payments: the payment provider processes the card. We keep the subscription status, dates and amounts for accounting, not card numbers.

Visits: the counter on a page. We do not store IP addresses. To count one visitor once a day, the address is turned into a short code with a key that changes every night and is not kept, so the code cannot be turned back into an address.

Technical records: the server writes short-lived logs needed to keep the service running and to stop abuse.

We use one cookie: the one that keeps you signed in. There are no advertising or tracking cookies, so there is no cookie banner to click away. Analytics, if enabled, runs without cookies and without personal data.

To provide the service you signed up for (performance of a contract): your account, page, messages and payments. To keep the service safe and working, and to answer complaints (legitimate interest). To meet accounting and tax duties (legal obligation). Where we ask for consent, you can withdraw it at any time.

We work with processors who act on our instructions only: [hosting provider] for servers in the EU, [storage and delivery provider] for files, [payment provider] for payments, [email provider] for service emails. We do not sell data and do not share it for advertising. We disclose data to authorities only when the law requires it.

Servers and file storage are in the European Union. If a processor transfers data outside the EU, it happens under the European Commission’s standard contractual clauses.

Account data lives while the account exists. Messages are deleted after the period shown on your page, by default 30 days. After you delete the account, your page, files and messages go immediately; payment records are kept for the period accounting law requires, detached from your profile.

You may ask for a copy of your data, correct it, delete it, limit or object to its processing, and receive it in a portable form. Most of this is available in the dashboard right away; for the rest write to [email]. You may also complain to your national data protection authority.

The service is not meant for children under 16. If you believe a child created an account, write to [email] and we will remove it.

If we change this policy substantially, we announce it by email at least 14 days before it takes effect. The date of the current version is shown at the bottom of this page once the final text is in place.