Privacy Policy

1. Information We Collect

A. Contact/Popup Submissions

When you use our Contact page, sign up for updates, or interact with our popups, we collect:

• Email address (if you provide it)
• Message or feedback text you submit
• Star ratings (experience ratings you provide)
• Your preferences/consents (e.g., whether you want updates, whether we can use your feedback publicly)
• Timestamp of when the submission was created
• IP address (automatically collected)
• Browser and device information (automatically collected)

B. Search Performance Analytics

We use Google Search Console to monitor how our site appears in Google Search results, including:

• Search queries that lead to our site
• Impressions and clicks
• Site performance in search results

This data is reported in aggregated form only and is not used to identify individual visitors.

C. Automatically Collected Information

When you visit our site, we automatically collect:

• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring website
• IP address
• Cookie data (see Cookie section below)

2. How We Use Your Information

We use your information to:

• Generate and deliver your personalized sigil
• Respond to messages submitted through the Contact form
• Send updates and announcements where you have separately opted in (you can withdraw that consent at any time - see Section 7)
• Display your feedback publicly as reviews ONLY if you checked the consent box (without your email or identifying information)
• Improve the site and user experience based on feedback and aggregated performance data
• Prevent fraud and abuse
• Comply with legal obligations

3. We Do Not Sell Your Information

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

4. Public Reviews and Testimonials

If you check the box "I agree my feedback may be used publicly as reviews" in our popup, we may display your feedback (WITHOUT your email address or other personal information) on:

• Our website
• Marketing materials
• Social media platforms

Your review will be shown anonymously or with only your first name/initials (never your full email address).

You can request removal of your review at any time by using our Contact page.

5. Where Your Data Is Stored

Form submissions and user data are stored securely on Lovable Cloud infrastructure, located in the United States. Data is encrypted at rest (AES-256) and in transit (TLS).

6. Who Can Access Your Information

• Site operators (us) can access submissions via the Lovable Cloud dashboard
• Collaborators (if added in the future) may have access with proper authorization
• Service providers who help us operate the site (Lovable Cloud, email providers if applicable, hosting services) - all are contractually obligated to protect your data
• Public visitors cannot view your private submissions
• Law enforcement may access data if required by law or valid court order

7. Email Communications and Unsubscribing

We may use your email address to deliver content you specifically request and to respond to requests you send us. Marketing or promotional emails are sent only where you have separately opted in, and you may withdraw that marketing consent at any time.

• You can opt out at any time by:
  • Clicking the "Unsubscribe" link at the bottom of any email we send
  • Using our Contact page to request removal
• We will honor valid opt-out requests within the timeframe required by applicable law.

We do not share your email address with third parties for their own marketing purposes.

8. Data Retention

We retain your information as follows:

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal, security, and recordkeeping requirements.

You may request access to, correction of, or deletion of personal data we hold about you through our Contact Us page. We will respond in accordance with applicable law. Certain information may be retained where permitted or required by law.

9. Third-Party Services

We use the following third-party services that may process your data:

Each provider processes data according to their own privacy policies when you use their services.

10. Cookies

We use essential cookies only for basic site functionality, such as:

• Remembering that you've dismissed popups
• Session management
• Security features
• Basic site preferences

We do not currently use Google Analytics or similar on-site tracking scripts.

Lovable Platform Analytics Identifier

Our site is built and hosted on the Lovable platform. Lovable stores an analytics identifier called __lovable_anonymous_id in your browser. This identifier is a random, anonymous value used by Lovable to measure aggregate site usage (such as unique visitors and traffic patterns). It does not contain your name, email, or other personal information, and we do not use it to identify you individually.

You can remove this identifier at any time by clearing your browser's site data for personalsigil.com.

Managing Cookies

You can disable cookies in your browser settings, but some features may not work properly. Here's how to manage cookies in popular browsers:

• Chrome
• Firefox
• Safari
• Edge

11. Your Rights

For All Users:

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Opt out of marketing emails
• Request removal of public reviews/feedback
• Ask questions about how we use your data

For EU/UK Users (GDPR):

In addition to the above, you have the right to:

• Object to processing of your data
• Restrict processing in certain circumstances
• Data portability (receive your data in a portable format)
• Withdraw consent at any time (doesn't affect prior processing)
• Lodge a complaint with your local data protection authority (Find your DPA)

For California Users (CCPA):

California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information (with certain exceptions)
• Opt-out of sale of personal information (we DON'T sell your data)
• Non-discrimination for exercising your rights

How to Exercise Your Rights:

You may request access to, correction of, or deletion of personal data we hold about you through our Contact Us page. We will respond in accordance with applicable law. Certain information may be retained where permitted or required by law.

12. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process your data based on:

• Consent: When you opt-in for marketing emails or agree to public use of feedback
• Legitimate interests: For site operation, fraud prevention, analytics, improving services
• Contractual necessity: To provide the sigil generation service you requested

You have the right to withdraw consent at any time without affecting prior processing based on consent.

13. International Data Transfers

Our servers and service providers may be located outside your country of residence, primarily in the United States. If you are accessing our site from the European Union, United Kingdom, or other regions with data protection laws, your data may be transferred to and processed in countries with different data protection standards.

For EU/UK users: We ensure appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission) when transferring data internationally. Our service providers (Lovable Cloud) comply with applicable data protection regulations.

14. Children's Privacy (COPPA Compliance)

Our services are not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children.

If you are under the age of digital consent in your country, you must have permission from a parent or legal guardian to use the Site (as stated in our Terms of Service).

Parents/Guardians: If you believe we have collected information from a child under 13 (or 16 in the EU), please contact us immediately using our Contact page, and we will delete it promptly.

15. Data Security

We implement reasonable security measures to protect your data, including:

• SSL/TLS encryption for data transmission (https://)
• Secure hosting with database access controls (row-level security policies)
• Encrypted database storage
• Rate limiting and input validation on form submissions
• Ongoing security updates to our platform and dependencies

However, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security. By using our services, you acknowledge this inherent risk.

If you discover a security vulnerability, please report it to us immediately via our Contact page.

16. Data Breach Notification

In the event of a personal data breach, we will take appropriate steps to investigate, contain, and address the incident, and will notify affected individuals and/or relevant authorities when and within the timeframe required by applicable law.

17. Do Not Track Signals

Our site does not currently respond to "Do Not Track" (DNT) browser signals. However, you can control cookies and tracking through your browser settings (see Cookie section above).

18. Third-Party Links

Our site may contain links to external websites (e.g., social media, resource sites). We are not responsible for the privacy practices of these third-party sites.

Please review their privacy policies before sharing personal information on external sites.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the "Last Updated" date. Where applicable law requires additional notice or consent, we will provide it as required.

20. Contact Us

For questions about this Privacy Policy, to exercise your rights, or to report concerns:

Contact Page: PersonalSigil Contact

We will respond to requests in accordance with applicable law.

For EU users: You have the right to lodge a complaint with your local supervisory authority if you believe we have not addressed your concerns adequately.

21. Consent

Where we rely on consent to process personal data, we request that consent through a specific opt-in choice. You may withdraw consent at any time. Other processing may rely on another lawful basis as described in this Privacy Policy.

To withdraw consent or adjust your preferences, use our Contact Us page.