Legal scaffold
Privacy policy
The final policy should describe the information the actual site collects, why it is processed, who receives it, how long it is retained, and which choices or rights are available to visitors.
Information collected
Document submitted form fields, analytics identifiers, cookies, server logs, account information, uploaded content, and any information received from integrations. The included contact form keeps first-touch campaign tags, the external referrer without its query, the first landing page, and up to five recent same-site paths in local browser storage for submission with the form. Remove categories the production site does not collect.
How information is used
Explain the concrete purposes for processing, including responding to enquiries, operating the service, measuring site performance, preventing abuse, and meeting legal obligations where applicable.
Providers, retention, and rights
Name or categorize relevant processors, define retention periods, record international transfers where applicable, and provide the real contact and request process required for the client's operating markets.
Return to the homepage or review docs/launch/checklist.md before approving this route.