Effective date: November 26th, 2024

Welcome to privacy at YourSitee (“YourSitee”)!

We care about your privacy and want to be transparent about how we handle your data when you use YourSitee services (“Services”): what we collect, why we collect it, where it goes, how long it’s kept, your rights, and what requests you can make regarding your data. This Privacy Policy ("Privacy Policy") explains these points as clearly and simply as possible.

We respect the security of your data and ensure that it is not misused. Our data-handling decisions are always made with your and other YourSitee users' interests in mind.

This Privacy Policy is part of the User Agreement, which includes our Terms of Service (“Terms”) and Community Standards. Specific terms within the User Agreement have defined meanings and should be interpreted consistently wherever they appear.

If you don't accept or agree with the following Privacy Policy, please don't register for an account or delete your existing account, as you are not entitled to use our services.

YourSitee as your Data Controller

YourSitee is your “Data Controller” as described in this Privacy Policy. The term “Data” refers to information that directly (such as your name, photo, or email address) or indirectly (like your user ID or data from shared widgets) identifies you. As a Hungarian company, we apply GDPR regulations to everyone, regardless of your country of origin. This means we are committed by law to safeguard your data privacy—not just in words but in action.

As a Data Controller, we process certain Data to operate our Services effectively. It’s important to note that processing your Data doesn’t mean we have unrestricted access to it. We follow all applicable regulations and establish additional guidelines to ensure security. Many of the Services we offer rely on your Data to function, and we handle it in line with this policy and our Terms.

What kind of data do we collect?

Children’s Data

Protecting children in their internet use is a top priority for us. We encourage parents and guardians to monitor, participate in, and/or guide their children’s online activity. YourSitee does not knowingly collect any personally identifiable information from children under the age of 13. If you believe your child has provided such information on our website, please contact us immediately, and we will make every effort to promptly remove that information from our records.

Data you provide us

• Account Information. When you register for our Services, you provide us with your username, email address, and password, which are essential to enable access. After registration, you'll receive a confirmation email to verify your account.
• Profile Picture. You can personalize your site with a profile picture, which you’re free to update anytime in Account Settings.
• Personal Details. Optionally, you can share your location (city or country), educational background, workplace, or birthday to help visitors get to know you. These fields are entirely optional, and we don't verify their accuracy.
• Communications. Any additional information you share through our Services—such as texts, images, videos, and other media in widgets—is also stored.
• Media. Content you create on YourSitee, including photos, images, videos, and other media files, is retained for your use on the platform.
• Support. Any information you provide when reaching out to our support team ([email protected]) is collected, which may include communication content, photos, government-issued IDs, and identifiers, along with the method you used to contact us.
• Exercising Your Rights. When you exercise your privacy rights, we collect information necessary to verify your identity and respond to your requests.
• Transactional Data. If you purchase premium features, we retain your purchase and subscription history. However, payment details are processed by a third-party processor (Stripe, and its privacy policy).
• Sensitive Data. We do not process sensitive information — lucky us!

Data we get from your usage of the services

• Invitations. If you choose to activate an invitation received from another user — by registering for our Services using the invitation code — the user who sent the invitation will see the username with which you accepted the invitation.
• Visitor statistics. When a visitor views a site created by a YourSitee user, we collect some Data for statistical purposes. This information is anonymized and cannot be traced back to individuals, IP addresses, or other personal details. Instead, it provides the site owner with statistical charts and insights, helping them better understand visitor behavior.
  • IP Address. Used to show the visitor’s country of origin.
  • Browser and Operating System. This information allows us to gain insight into the browsers and operating systems used by visitors, enabling us to optimize our website for optimal user experience. This data is taken from the User-Agent HTTP header.
  • Browser Languages. Indicates which languages are supported by a visitor’s browser.
  • Links. Tracks visitor navigation across sites, including time spent, entry points, and exit pages.
• Visitor, internal analytics. To help us better understand website traffic, YourSitee uses Plausible.io, a privacy-friendly analytics platform that collects only anonymized data. Access to these insights is restricted to authorized YourSitee team members, allowing us to improve the Service while respecting user privacy.
  • HTTP Referrer. Shows how visitors arrive from external links.
  • Browser. We use this to show you what browsers and browser version numbers people use when visiting your website. This is derived from the User-Agent HTTP header. The full User-Agent is discarded.
  • Operating system. We use this to show YourSitee what operating systems people use when visiting your website. We show the brand of the operating system and the version number. This is derived from the User-Agent HTTP header. The full User-Agent is discarded.
  • Device Type. We use this to show YourSitee what devices people use when visiting your website. Devices are categorized into desktop, mobile and tablet. This is derived from the User-Agent HTTP header. The full User-Agent is discarded.
  • Location (Country, Region, City). We look up the visitor’s location using their IP address. We do not track anything more granular than the city level and the IP address of the visitor is discarded. We never store IP addresses in our database or logs.
    • Plausible does not use cookies, but rather a unique identifier for anonymous tracking. For details, see Plausible’s data policy.
• Data collection by third parties. YourSitee also utilizes Cloudflare for performance and security enhancements. Cloudflare collects limited visitor data, including IP address, browser, and operating system, solely for the purpose of protecting and optimizing YourSitee’s website. More information on Cloudflare’s practices can be found in their privacy policy.

Data we collect from third-party sources

We may receive information from other companies that we own or operate — or from other third party sources — and combine it with the information we typically collect through our Services:

• Other Users. We may receive Data from other users, particularly through user-generated content, support requests, and user reports.
• Business Partners. Data may also come from our trusted business partners, such as app stores, operating system providers, and analytics service providers.
• Law enforcement and Government Organizations. We may obtain data from governmental organizations or legal authorities for security purposes, during investigations, or in the context of legal proceedings.

How do we see your data?

We use the Data we collect for the purposes outlined in this Privacy Policy, as well as any additional purposes that we inform you of when collecting your personal information. These purposes include:

• Facilitating account creation and authentication and otherwise managing user accounts. We process your Data to help you set up and log in to your account, as well as to keep it operational.
• Responding to user inquiries and providing support. We may process your Data to respond to your requests and address any issues with the Services provided.
• Sending administrative information to you. We may process your Data to send you details about our products and Services, changes to our Terms and policies, and other related information.
• Requesting feedback. If needed, we may process your Data to request feedback and reach out to you regarding your experience with our Services.
• Sending marketing and promotional communications. We may process the personal information you provide for marketing purposes, in line with your preferences. You may opt out of our marketing emails at any time.
• Protecting our Services. We may process your Data as part of our efforts to maintain the security of our Services, including fraud detection and prevention.
• Processing payments. For users on paid plans, we handle payment processing.
• Business planning. We use Data for business planning, reporting, and forecasting.
• Evaluating and improving our Services, products, marketing, and your experiences. We may process your data to identify usage trends, assess the effectiveness of promotional campaigns, and improve our Services, products, marketing, and your experience. Online sites you create may also be used as promotional material.
• Providing recommendations. We use your Data to inform our algorithms and offer you the most relevant recommendations, including profiles of users you may be interested in.
• Meeting our legal obligations. We may process your Data to fulfill legal requirements, respond to legal requests, and exercise, establish, or defend our legal rights.
• Identity verification. We verify your identity and detect fraud, including fraudulent payments and misuse of YourSitee Services.

How do we protect your data?

We have implemented appropriate and reasonable technical and organizational security measures to protect the personal Data we process. However, despite our precautions and efforts to secure your data, no electronic transmission of data over the internet or information storage technology can be guaranteed to be 100% secure. Therefore, we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security measures and improperly collect, access, steal, or alter your Data. While we take and will continue to take all reasonable steps to protect your personal information, any Data you transmit to and from our Services is at your own risk. Access to the services is only permitted in a secure environment.

What are our bases for using your data?

As a European company, we can only use your Data under certain conditions. We refer to these conditions as "Legal Bases", and YourSitee generally relies on one of the following four Legal Bases:

• Contract. We may use your Data if it is necessary to provide you with our Services as described in our Terms of Service. This Data is essential for delivering a complete YourSitee experience.
• Legitimate Interest. We may need to use your data to provide and improve our Services, including protecting your account, customer support, and detecting fraudulent activities. We only invoke legitimate interest if we believe that using your Data does not significantly impact your privacy.
• Consent. In some cases, we may ask for your consent to use your Data for specific purposes. If we do this, we will ensure that you can withdraw your consent at any time through our Services or your device permissions. Even if we do not rely on consent, we may request your permission to access the data.
• Legal Obligation. We may need your data to comply with legal requirements, such as responding to valid legal processes or taking actions to protect our users. If we request your Data to fulfill a legal obligation, we will clearly inform you and let you know whether providing your personal data is mandatory and what the consequences might be if you do not provide it.

It is important to note that we need certain personal data to enter into a contract with you as a YourSitee user. Without your personal Data, we cannot provide you with the Services available to YourSitee users.

What do we mean by "links to other sites"?

Due to the link-sharing nature of our Service, sites on YourSitee often reference third-party websites. If you click on a link from a third party, you will be redirected to that site. Please note that we do not operate these external websites. Therefore, we strongly recommend that you read the privacy policies of these sites. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party websites or services.

Who can have access to your data?

Many great people work to provide you with our Services. Here’s who they are and how we may share your Data with them:

• YourSitee Employees and Contractors. Since our services currently cannot operate independently, authorized employees and contracted individuals at YourSitee may access your Data to provide our Services or necessary support. Such access is limited to the scope of their duties and only to the data necessary for them to perform their tasks.
• Other Users and non-Users.
  • When you use our Service features, your shared data, such as your username, description, and profile picture, will be publicly accessible. Remember that your profile is public and can be viewed by others.
  • Information about how you interacted with the services, such as the date of your connection.
  • If you choose to share it, information about your education or employment.
  • Badges and other designations that may contain information related to your page.
  • Widgets, links, blog posts, text, and images you create.
• Affiliates. This means we may share data within YourSitee.
• Third Parties.
  • Service Providers and Partners. We may share your data with Service providers and business partners who perform services and functions on our behalf, including those who may display ads on their platforms.
  • For Legal Reasons with Third Parties. We may share data about you if we reasonably believe that disclosure is necessary:
    • To comply with legal processes, government requests, or applicable laws, regulations, or rules.
    • To investigate, remedy, or enforce violations of our terms of service.
    • To protect our rights, the rights of our users, or others’ rights, property, and safety.
    • To detect fraud or security issues.
  • Other Third Parties. We may also share aggregated, non-personally identifiable, or non-identifiable data.

How long do we keep your data?

We retain your Data as long as you remain a user of our Services. Different types of data are subject to different retention protocols, which are detailed in our data processing summary table. In every case, we will delete or anonymize the Data at the end of the specified periods.

If you do not use the Services for 36 months, we may delete your account and associated data after prior notice. However, we will retain your Data as long as you actively use the Services.

The following Data will be stored as long as you actively use the Services:

• Your name and email address
• Your profile picture and other uploaded media
• Your written widgets, blog posts, and other widget settings
• Your customization settings

If you are uncomfortable sharing your Data, you can delete your account at any time. More information on how to do this can be found in the next section.

Your control over your data

• Access. You can access and update most of the Data we hold about you through the profile section of our Service. If you wish to access, update, or delete any other data we store, please contact us at [email protected]. Please note that we may ask you to verify your identity before granting access to your data.
• Objection. You have the right to object to the use of your Data. In cases where your Data is essential for providing the Services, you can prevent us from processing your Data by deleting your account.
• Rectification. You have the right to correct your Data if you find any information to be incorrect.
• Account Deletion. You can delete your Data in our Services simply by deleting your account. However, due to security protocols, certain data may be retained even after deletion, but this data will be anonymized. Data retained after deletion cannot be removed for security reasons.
• Cancellation of Account Deletion Process. If you have requested the deletion of your account but change your mind, you have up to 30 days to restore your account before your Data is deleted from our servers. During this period, your account will not be visible to other users. Please contact us as soon as possible at [email protected]!
• Data Portability. You have the right to receive the Data we hold about you in a structured and machine-readable format that we provided based on your consent or contract.
• Posthumous Data Management Instructions. You have the right to give instructions regarding whether YourSitee should transfer your Data to a previously designated third party.
• Filing a Complaint. If you believe that the processing of your Data violates your rights or the applicable data protection regulations, you have the right to file a complaint with the NAIH or your local supervisory authority.

Please feel free to reach out to us at any time. We strive to respond promptly, but as we are only human, if your request is complex or if you have multiple inquiries, it may take us some time to respond.

Future changes

Times are continually changing, and as a result, our Privacy Policy will be updated. Changes will be made in consideration of technical, economic, regulatory, or legal developments to ensure compliance with applicable laws, regulations, and changes in data processing practices. We may implement these modifications without formally notifying you. You acknowledge and agree that it is your responsibility to periodically review the Privacy Policy to stay informed of any changes. If you continue to use YourSitee after the modifications to the Privacy Policy, this will be considered acceptance of the revised Privacy Policy. If you do not agree with the changes, please discontinue your use of YourSitee and delete your account. In all cases, the date of the last modification will be indicated at the beginning of the document.

Contact us

Always feel free to contact our team at [email protected] — we're happy to read emails, so don't be shy.

Some interesting charts that are part of our Privacy Policy:

Data Processing Chart

Purpose of the processing	Data processed	Legal ground for the processing	Retention period
Creating a single account for the Services and identifying you when you log in.	Mandatory profile data (username, email address).	Performance of the contract between you and YourSitee.	Duration of your use of the services or until you request the deletion of your account.
Creating a single account for the Services and identifying you when you log in.	Optional profile data (profile picture, bio, etc.).	Performance of the contract between you and YourSitee.	Duration of your use of the services or until you request the deletion of your account.
Providing you with the Services (allowing you to publish content).	Content related data.	Performance of the contract between you and YourSitee.	Duration of your use of the services or until you request the deletion of your account or data.
Addressing complaints and reports from users and moderation of content in accordance with our Terms of Service.	Content data; Communication with YourSitee.	Legitimate interest to provide safe Services.	Duration of the use of the services augmented by 5 years
Moderation of content in accordance with the law (prevention of illegal activities, fraud, cyber harassment, ...) and our Terms of Service.	Content Data; Data about your activity on YourSitee.	Compliance with our legal obligations.	1 year from collection for metadata. Up to 5 years (statutory limitation) for data retained for dispute prevention purposes.
Allowing you to make purchases.	Transaction data transmitted by the payment processing service.	Performance of the contract between you and YourSitee.	Time required to complete the transaction augmented by 10 years for accountancy obligations.

List of data processors

Who	What
Amazon Web Services, Inc.	E-mail delivery
Apple, Inc.	Communications services
Cloudflare, Inc.	Security and performance services
Crowdin OÜ	Language localization services
DigitalOcean, LLC.	Cloud services
Github, LLC.	Software code management
Google, LLC.	Cloud services, marketing, analytics, and communication tools
Hetzner Online GmbH	Cloud services
Meta Platforms, Inc.	Marketing services
New Vector Ltd.	Internal operations tooling
Scaleway SAS	Content delivery services
Stripe, Inc.	Financial processing and services