Privacy Policy

Who we are

Weboniser is a website builder. You describe or design a site, we host it and serve it to your visitors. For the personal data described below, Weboniser is the data controller. You can reach us at lardsamar001@gmail.com.

What we collect

Account data. Your email address, your name if you give one, and a bcrypt hash of your password. We never store your password itself and cannot recover it — only reset it.

Content you create. The pages, text, images and settings of the websites you build. This is yours; we store it so we can publish it.

Visitor analytics. When someone views a site you published, we record a page view so we can show you a visit count. We do not build advertising profiles of your visitors and we do not sell this data.

Contact form submissions. If your published site has a contact form, whatever a visitor types into it is stored so you can read it in your inbox. You are responsible for what you then do with it.

Payment data. If you upgrade to a paid plan, Stripe collects and processes your card details. We never see or store your card number. We keep a record that a payment happened: the amount, the currency, the status and the Stripe session id.

Cookies and advertising

Keeping you logged in. We set one essential cookie: a signed session token. It is HTTP-only, so scripts on the page cannot read it, and it does nothing except identify your session.

Our marketing pages. Weboniser’s own pages may load Google Analytics, Google Ads and Meta Pixel tags so we can measure which advertising actually works. These can set third-party cookies and report your visit back to those providers. Browser-level controls such as “do not track” signals, tracker blocking and the opt-outs offered by Google and Meta all work here.

Websites you publish. We do not run our advertising or analytics tags on the sites our customers build. Your visitors are yours, not ours. The only thing we record there is a page-view count so you can see traffic in your dashboard. If you add your own analytics or advertising tools to a site you build, that is your choice — and your responsibility to disclose to your visitors.

Who we share it with

We do not sell your data. We use a small number of processors, each doing one job:

• Vercel — hosting and serving the application and your published sites.
• Supabase — the database that stores your account and your site content.
• Stripe — payment processing for paid plans.
• Resend — sending transactional email such as password resets.
• Anthropic — if you use the Smart Start generator, the description you type is sent to Anthropic’s API to produce a first draft of your site. Do not paste confidential information into it.
• Google and Meta — advertising measurement on our own marketing pages only, as described above.

We will also disclose data where we are legally required to, and we will tell you when we are permitted to tell you.

How long we keep it

Account and site data is kept for as long as your account exists. Delete a site and its content and analytics go with it. Ask us to delete your account and we will remove your personal data within 30 days, except for payment records we are required to retain for tax and accounting purposes.

Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to how we process it, or take it elsewhere. Email lardsamar001@gmail.com and we will act on it. You do not need to give a reason, and we will not make it difficult. If you are in the EU or UK and think we have got something wrong, you can also complain to your local data protection authority.

Security

Passwords are hashed with bcrypt. Sessions are signed and HTTP-only. Traffic is served over HTTPS. Database access is restricted by row-level policies so one account cannot read another’s data. No system is perfect; if we ever discover a breach affecting your data, we will tell you rather than hope you do not notice.

Children

Weboniser is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Changes

If we change this policy in a way that materially affects you, we will update the date at the top and, for significant changes, email you. We will not quietly broaden what we do with your data.

Contact

Questions, requests, or complaints: lardsamar001@gmail.com.