Privacy Policy

1. Information We Collect

A. Contact/Popup Submissions

When you use our Contact page, sign up for updates, or interact with our popups, we collect:

• Email address (if you provide it)
• Message or feedback text you submit
• Star ratings (experience ratings you provide)
• Your preferences/consents (e.g., whether you want updates, whether we can use your feedback publicly)
• Timestamp of when the submission was created
• IP address (automatically collected)
• Browser and device information (automatically collected)

B. Search Performance Analytics

We use Google Search Console to monitor how our site appears in Google Search results, including:

• Search queries that lead to our site
• Impressions and clicks
• Site performance in search results

This data is reported in aggregated form only and is not used to identify individual visitors.

C. Automatically Collected Information

When you visit our site, we automatically collect:

• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring website
• IP address
• Cookie data (see Cookie section below)

2. How We Use Your Information

We use your information to:

• Generate and deliver your personalized sigil
• Respond to messages submitted through the Contact form
• Send updates and announcements ONLY if you explicitly opted in (you can unsubscribe anytime - see Section 7)
• Display your feedback publicly as reviews ONLY if you checked the consent box (without your email or identifying information)
• Improve the site and user experience based on feedback and aggregated performance data
• Prevent fraud and abuse
• Comply with legal obligations

3. We Do Not Sell Your Information

We will NEVER sell, rent, or share your personal information with third parties for their marketing purposes.

4. Public Reviews and Testimonials

If you check the box "I agree my feedback may be used publicly as reviews" in our popup, we may display your feedback (WITHOUT your email address or other personal information) on:

• Our website
• Marketing materials
• Social media platforms

Your review will be shown anonymously or with only your first name/initials (never your full email address).

You can request removal of your review at any time by using our Contact page.

5. Where Your Data Is Stored

Form submissions and user data are stored securely on Lovable Cloud infrastructure, located in the United States. Data is encrypted at rest (AES-256) and in transit (TLS).

6. Who Can Access Your Information

• Site operators (us) can access submissions via the Lovable Cloud dashboard
• Collaborators (if added in the future) may have access with proper authorization
• Service providers who help us operate the site (Lovable Cloud, email providers if applicable, hosting services) - all are contractually obligated to protect your data
• Public visitors cannot view your private submissions
• Law enforcement may access data if required by law or valid court order

7. Email Communications and Unsubscribing

If you opted in to receive updates:

• We will only send occasional updates about new features, improvements, or important site news
• You can unsubscribe at any time by:
  • Clicking the "Unsubscribe" link at the bottom of any email we send
  • Using our Contact page to request removal
  • Emailing us directly (see Contact section below)
• We will process your unsubscribe request within 48 hours

We only send emails for major updates or significant changes, we will not email you for minor adjustments or routine updates.

We will never send you spam or share your email with third parties for marketing.

8. Data Retention

We retain your information as follows:

You can request deletion at any time using our Contact page.

9. Third-Party Services

We use the following third-party services that may process your data:

Each provider processes data according to their own privacy policies when you use their services.

10. Cookies

We use essential cookies only for basic site functionality, such as:

• Remembering that you've dismissed popups
• Session management
• Security features
• Basic site preferences

We do not currently use Google Analytics or similar on-site tracking scripts.

Lovable Platform Analytics Identifier

Our site is built and hosted on the Lovable platform. Lovable stores an analytics identifier called __lovable_anonymous_id in your browser. This identifier is a random, anonymous value used by Lovable to measure aggregate site usage (such as unique visitors and traffic patterns). It does not contain your name, email, or other personal information, and we do not use it to identify you individually.

You can remove this identifier at any time by clearing your browser's site data for personalsigil.com.

Managing Cookies

You can disable cookies in your browser settings, but some features may not work properly. Here's how to manage cookies in popular browsers:

• Chrome
• Firefox
• Safari
• Edge

11. Your Rights

For All Users:

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Unsubscribe from marketing emails
• Request removal of public reviews/feedback
• Ask questions about how we use your data

For EU/UK Users (GDPR):

In addition to the above, you have the right to:

• Object to processing of your data
• Restrict processing in certain circumstances
• Data portability (receive your data in a portable format)
• Withdraw consent at any time (doesn't affect prior processing)
• Lodge a complaint with your local data protection authority (Find your DPA)

For California Users (CCPA):

California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information (with certain exceptions)
• Opt-out of sale of personal information (we DON'T sell your data)
• Non-discrimination for exercising your rights

How to Exercise Your Rights:

Contact us using our Contact page or email us directly (see Contact section below).

Response Time:

• General requests: Within 30 days
• California CCPA requests: Within 45 days
• EU GDPR requests: Within 1 month (extendable by 2 months if complex)

12. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process your data based on:

• Consent: When you opt-in for marketing emails or agree to public use of feedback
• Legitimate interests: For site operation, fraud prevention, analytics, improving services
• Contractual necessity: To provide the sigil generation service you requested

You have the right to withdraw consent at any time without affecting prior processing based on consent.

13. International Data Transfers

Our servers and service providers may be located outside your country of residence, primarily in the United States. If you are accessing our site from the European Union, United Kingdom, or other regions with data protection laws, your data may be transferred to and processed in countries with different data protection standards.

For EU/UK users: We ensure appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission) when transferring data internationally. Our service providers (Lovable Cloud) comply with applicable data protection regulations.

14. Children's Privacy (COPPA Compliance)

Our services are not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children.

If you are under the age of digital consent in your country, you must have permission from a parent or legal guardian to use the Site (as stated in our Terms of Service).

Parents/Guardians: If you believe we have collected information from a child under 13 (or 16 in the EU), please contact us immediately using our Contact page, and we will delete it promptly.

15. Data Security

We implement reasonable security measures to protect your data, including:

• SSL/TLS encryption for data transmission (https://)
• Secure hosting with access controls
• Password protection for admin access
• Regular security updates
• Encrypted database storage
• Regular backups

However, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security. By using our services, you acknowledge this inherent risk.

If you discover a security vulnerability, please report it to us immediately via our Contact page.

16. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours (if required by law)
• Report to relevant authorities (e.g., data protection authorities in EU, Attorney General in California)
• Take immediate steps to mitigate harm and secure systems
• Provide information about what data was affected and what steps you should take

17. Do Not Track Signals

Our site does not currently respond to "Do Not Track" (DNT) browser signals. However, you can control cookies and tracking through your browser settings (see Cookie section above).

18. Third-Party Links

Our site may contain links to external websites (e.g., social media, resource sites). We are not responsible for the privacy practices of these third-party sites.

Please review their privacy policies before sharing personal information on external sites.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• Legal or regulatory requirements
• New features or services

How we notify you of changes:

• Updated "Last Updated" date at the top of this page
• For material changes: notice on our homepage or via email (if you're subscribed)

Your continued use of the Site after changes are posted constitutes acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically.

20. Contact Us

For questions about this Privacy Policy, to exercise your rights, or to report concerns:

Contact Page: PersonalSigil Contact

Response Time: We aim to respond within:

• 48 hours for general inquiries
• 30 days for data access/deletion requests
• As required by law for GDPR/CCPA requests

For EU users: You have the right to lodge a complaint with your local supervisory authority if you believe we have not addressed your concerns adequately.

21. Consent

By using PersonalSigil.com and submitting information through our popups or contact forms, you consent to:

• ✓ This Privacy Policy
• ✓ Our use of cookies as described
• ✓ Our Terms of Service
• ✓ Data processing as described herein

You may withdraw consent at any time by contacting us or adjusting your preferences.