Privacy Policy

Last updated October 13, 2026

This policy explains what personal data SitePets handles and why. SitePets is operated by ManuSoft Inc, a US corporation doing business as SitePets (“we”). Contact: [email protected].

We play two different roles, so this policy has two parts:

• For the Snippet running on other people’s websites, we are the website owner’s processor. The website owner decides, and our Data Processing Agreement and What the Snippet does describe the processing.
• For sitepets.com, Owner accounts and purchases, ManuSoft Inc is the controller. The rest of this policy covers that.

Visitors to sitepets.com

We count how many people visit sitepets.com, copy the Snippet, click Adopt and reach checkout, and which referral source (a ref or utm_source link parameter) they came from. To count each visitor only once per day, our server combines your IP address and browser user-agent with a secret that exists only in the server’s memory, is replaced every day, and is never written down. The result of that combination is also never written down. We store only daily totals, such as “42 visitors from ref=newsletter on October 20”.

Our web server doesn’t write IP addresses to its logs or database. Like every website, sitepets.com is delivered through Cloudflare, which processes your IP address to deliver the page and protect the service.

Your browser stores two things for this site: the Site Key we made for you and its secret (in local storage, so you can install the Snippet and Claim your Pet later), and the referral source of your visit (in session storage, cleared when you close the tab). When you sign in we set one cookie, sp_owner, that keeps you signed in for up to 30 days. We use no advertising or analytics cookies and no third-party trackers. Fonts are served from our own domain.

Legal basis: our legitimate interest in understanding, in aggregate, whether people want SitePets (GDPR Art. 6(1)(f)), and storage that is strictly necessary for features you ask for.

Owners

• Account: your email address, and the Sites and Pets on your account (Site Key, hostname, Pet name, Species, Verification results).
• Sign-in emails: each one carries a link and a 6-digit code. We keep only one-way hashes of them, they expire after 15 minutes, and we delete expired records.
• Sign in with Google: if you choose it, Google confirms your identity and tells us your email address. We ask Google for nothing else and receive nothing else.
• Purchases: Link (a Stripe company) is the merchant of record and processes your payment as an independent controller under its own privacy policy. We receive your email address, Stripe customer, subscription, invoice and payment references, the amount and currency, but never your card details.
• Your Site’s statistics: hourly counts of page loads on your Site, which we keep for your Pet and your dashboard.

Legal basis: performing our contract with you (Art. 6(1)(b)), keeping records the law requires (Art. 6(1)(c)), and our legitimate interest in keeping the service secure (Art. 6(1)(f)). We email you about your account and purchases. We don’t send marketing email without asking.

Who else handles data

• Hetzner Online GmbH (Germany): hosts our servers and database, in the EU (Germany or Finland).
• Cloudflare, Inc. (USA): delivers sitepets.com and the Snippet, and provides DNS.
• Resend, Inc. (USA): delivers sign-in and account emails to Owners, sending from Amazon Web Services in the EU (Ireland). It receives your email address and the message, only to deliver it.
• Google: only if you choose Sign in with Google, as the identity provider that confirms your email address.
• Link / Stripe: payments, as merchant of record and independent controller.

ManuSoft Inc, Cloudflare and Resend are US companies. Where personal data from the EU, UK or Switzerland is accessed from or sent to the US, we rely on the EU-US Data Privacy Framework where the recipient is certified, and on the European Commission’s Standard Contractual Clauses otherwise.

How long we keep data

• Account data: while your account exists, and up to 90 days after you ask us to close it.
• Purchase records: as long as tax and accounting law requires.
• An unclaimed Pet: may be removed after 7 days if its Site hasn’t been Claimed.
• Daily visitor totals for sitepets.com and hourly Site counts contain no personal data and may be kept indefinitely.

Your rights

Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent you gave. Email [email protected]. You can also complain to your local data protection authority. We don’t sell or share personal data for advertising.

Changes

We will post changes here and, if they matter, email account holders before they take effect.