docs/gdpr.md for the checklist a template can't cover.Privacy Policy
Last updated: 1 January 2026
Who we are
[Company / Data Controller name], [address], contactable at [privacy@yourdomain]. We are the controller of the personal data described below.
What we collect
Account data you give us (name, email) when you sign up; and, only after you accept the cookie banner, product analytics (pages viewed, interactions) via PostHog and Microsoft Clarity. Analytics stay off until you consent.
Legal basis (GDPR)
Account data: performance of a contract. Analytics/cookies: your consent, which you can withdraw at any time by clearing the banner choice or contacting us.
Your rights
You may access, export, correct, or delete your data. This project ships starter export and delete endpoints on the API for the access and erasure rights; contact [privacy@yourdomain] to exercise them.
Retention & sharing
We keep account data while your account is active. We share data only with the processors that run this stack (e.g. [hosting], [email], [analytics]); list them in your data-processing records.
Contact
Questions or requests: [privacy@yourdomain].