Privacy Policy
A draft to verify against actual website and application data handling.
1. Responsible operator
The operator is based in Morocco and intends to sell initially in their own name. Contact support for data-related questions.
To confirm before publication: Insert full legal name, address, controller identity and applicable registration or representative details.
2. Website and hosting
The website is hosted on Cloudflare Pages. Opening pages or requesting media sends connection information, including an IP address and requested URL, to the receiving infrastructure. A static site without a database can still involve personal-data processing.
To confirm before publication: Verify enabled hosting, logging, analytics and security services, their purposes, legal bases and retention.
3. External resources
The website references external fonts and scripts, including Google Fonts, unpkg, cdnjs and esm.sh. Loading a resource from another provider sends a request to that provider.
To confirm before publication: Complete a request inventory across all pages. Confirm provider details, processing locations and safeguards; assess whether resources should be self-hosted.
4. Purchases
Lemon Squeezy processes checkout as merchant of record. Information entered there is handled under its own terms and Privacy Policy.
To confirm before publication: Identify exact customer/order fields accessible to the operator, exports or copies, purposes, legal bases and retention. External checkout does not imply the operator receives no personal data.
5. Support
Email support receives the messages and attachments you send to handle your request. Avoid unnecessary confidential data or project files.
To confirm before publication: Identify the email provider, access controls, retention and deletion process, and applicable legal bases.
6. Desktop software and licensing
Website processing and application processing are distinct. Activation, license checks, updates and library downloads may use separate services.
To confirm before publication: Audit exact application identifiers, fields, recipients, diagnostics, project-data handling, purposes, legal bases, retention and transfers. No claim of zero telemetry or purely local data processing is made by this draft.
7. Cookies and browser storage
The final policy must describe actual cookies and similar technologies used by the website and relevant services.
To confirm before publication: Test pages and checkout. No database or obvious analytics script does not establish that no storage is used. Assess required consent controls before publication.
8. Retention, transfers and security
The final policy must specify meaningful retention periods or criteria, recipients and cross-border safeguards. Security statements must reflect implemented controls; no absolute security guarantee is made.
To confirm before publication: Confirm processor arrangements, deletion policies, transfer safeguards and applicable Moroccan and customer-market obligations.
9. Your requests
Contact support about access, correction, deletion or other rights available under applicable law. Identity may need proportionate verification. Some records may need retention where legally required.
To confirm before publication: Confirm applicable rights, response periods, objection or withdrawal mechanisms and complaint authority. Do not assume a jurisdiction-specific process applies universally.
10. Changes
The adopted policy must identify its effective date and explain material changes. This draft is not a complete processing inventory and must not be adopted until the outstanding items are resolved.
Contact: support@cncly.com.