Privacy Policy

1. Introduction

Commons Kit, Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website platform and services.

2. Information We Collect

Information You Provide

• Account information (name, email, organization)
• Billing information (processed securely by our payment provider)
• Content you create and upload to your website
• Communications with our support team

Information Collected Automatically

• Device and browser information
• IP address and approximate location
• Usage data and analytics
• Cookies and similar technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent security incidents
• Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share information with:

• Service providers: Companies that help us operate our services (hosting, analytics, payment processing)
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorize sharing

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We may retain certain information as required by law or for legitimate business purposes. You can request deletion of your data by contacting us.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information
• Portability: Request your data in a portable format
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at the address below.

8. Cookies and Analytics

What changed (October 2026): Google Analytics now loads only if you agree to it, and you can change your choice at any time.

Strictly necessary cookies

These keep you signed in, keep the site secure and remember your cookie choice. They are always on and are not used to track you.

Analytics (Google Analytics)

With your permission we use Google Analytics to see which pages are useful and how people find us. It is not loaded until you choose "Accept analytics" or switch it on in Cookie settings. If you switch it off later, we stop it and remove its cookies.

Campaign links and referral codes

When you arrive through one of our own links or QR codes (addresses that start with /go/), we record the visit on our own servers so we know which of our outreach works and, if a partner sent you, who to thank. This is first-party measurement: it is not gated by the analytics choice above, it uses no third-party cookies, and nothing is shared with advertisers or other companies.

The link sets two cookies on our domain, readable only by our servers:

• ck_vid: a random visitor number, not linked to your name or email. Kept for 1 year.
• ck_ref: the campaign or partner code from the link, so the signup form can fill in the "Referral or promo code" field for you. Kept for 90 days.

With each visit we store the campaign, the page you landed on, the website that sent you (its name only), campaign tags such as utm_source, an ad click identifier if the ad added one, a coarse device type (desktop, mobile or automated) and a one-way hash of your IP address. We never store the IP address itself. If you sign up within 90 days, the most recent campaign is credited on your account. Visits that do not lead to a signup are deleted after 180 days. You can delete the cookies in your browser at any time.

Open cookie settings

9. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child, please contact us immediately.

10. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

privacy@commonskit.com