Privacy Policy

We collect as little as the service can run on. You do not need an account to buy an edit.

What we collect

• An anonymous session id stored in a cookie, so your edit can be linked to your purchase and shown to you afterwards.
• A hashed form of your IP address. We store a salted hash, never the address itself. It is used for rate limiting and abuse prevention.
• Your country, derived from the connection. Country only — never a city, region or coordinates.
• Your browser user agent, for device classification and abuse detection.
• The content of your edit, which is public by design.
• Payment records from our payment processor: the payment and session identifiers, amount, tax, billing country and, where you provide it at checkout, your email for the receipt.

We never receive your card number, expiry or security code. Those go directly to the payment processor through its own hosted payment fields.

What we never show publicly

• Email addresses
• IP addresses, hashed or otherwise
• Card or billing information
• Billing addresses
• Device identifiers
• Any location more precise than a country

Public activity is shown at country level only, for example “Someone from 🇦🇿 edited the website”.

Images

Every uploaded image is re-encoded on our server before it is stored. That process removes EXIF data, GPS coordinates, camera information and any other embedded metadata. We store the processed image, not your original file.

Cookies

• Essential. The session cookie that links you to your own purchase, and the admin session cookie for operators. These are required for the service to function.
• Analytics. We record product events (page views, which edit types are opened, conversion steps) server-side, keyed to the anonymous session. No payment data is ever sent to any analytics tool, and we do not sell personal data.
• Advertising cookies. None. If that ever changes, it will require consent where consent is required, and this page will say so first.

How long we keep things

• Anonymous sessions and presence records: 180 days.
• Analytics events: 24 months.
• Rate-limit and fraud signal records: 90 days.
• Public edit records: for as long as the edit remains part of the site's history.
• Payment, tax and fulfilment records: as long as required by tax, accounting and dispute rules in the merchant's jurisdiction.

Deletion requests

Write to jafar.najafov@gmail.com. We can remove your public profile data — the username shown on your edits and any content you submitted — and disconnect it from your session.

Financial records that we are legally required to retain are kept separately from public content and are not deleted by a content deletion request. We will tell you what was removed and what was retained and why.

Processors

• Dodo Payments — merchant of record: payment processing, tax calculation and remittance, and receipts.
• Supabase — database, realtime and file storage.
• Vercel — hosting.
• A content classification provider, where one is configured, for moderating text and images before purchase.

Contact

jafar.najafov@gmail.com