Privacy Policy
This policy explains how Website Builder Finder ("we", "us") handles your data when you use this site. We have written it to be clear and specific, not to hide things in legal language. We collect very little data and sell none of it.
Data controller
The data controller for this site is the operator of Website Builder Finder, contactable via the GitHub issues page. The site is hosted on Render.com (United States).
What we process and why
| Data | Purpose | Lawful basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| IP address | Detect your country to show local pricing | Legitimate interest (Art. 6(1)(f)) — improves relevance without storing data | Not stored. Discarded immediately after currency is resolved. |
| Quiz answers (budget, site type, skill, features) | Generate a personalised recommendation via Groq AI | Contract / service delivery (Art. 6(1)(b)) | Not stored after the recommendation is returned. Held in memory only for the duration of the request. |
| Recommendation result + quiz answers | Power the shareable link feature | Consent — sharing is opt-in (Art. 6(1)(a)) | Stored in server memory under a random ID for up to 30 days. No personal data included. |
| Google Analytics cookies (_ga, _ga_*) | Understand aggregate site usage | Consent (Art. 6(1)(a)) — only loaded after you accept cookies | GA4 default: 2 years. See Google's privacy policy. |
Cookies
We use one first-party cookie-like entry: a localStorage key
(wbf_cookie_consent) that stores your cookie preference (accepted or
declined). This is essential to remember your choice and is not a tracking cookie.
If you accept analytics, Google Analytics sets the following cookies:
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics | Distinguishes users for aggregate analytics | 2 years |
_ga_* |
Google Analytics | Maintains session state | 2 years |
No advertising, remarketing, or fingerprinting cookies are used. IP anonymisation is enabled for all Google Analytics data.
Your cookie preferences
You can change your cookie choice at any time:
You can also opt out of Google Analytics globally using the Google Analytics Opt-out Browser Add-on.
Third-party processors
- Groq, Inc. (USA) — your quiz answers are sent to Groq's API to generate recommendations. Groq processes them under its own privacy policy. Data transfer to the USA is covered by Groq's privacy policy and applicable Standard Contractual Clauses. Your answers are not retained by us after the recommendation is returned.
- Google LLC (USA) — if you consent to analytics, usage data is sent to Google Analytics 4. Google acts as a data processor under a Data Processing Agreement. See Google's privacy policy.
- Render.com (USA) — the site is hosted on Render. Server access logs may be retained by Render per their privacy policy. We do not access or process these logs.
International data transfers
This site is hosted in the United States. If you are located in the European Economic Area (EEA), your data may be transferred to and processed in the USA. We rely on our processors' Standard Contractual Clauses and/or Data Privacy Framework certifications for these transfers where applicable.
Your rights under GDPR
If you are in the EEA, UK, or Switzerland you have the following rights:
- Access — request a copy of any personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — request we restrict processing of your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — withdraw analytics consent at any time using the button above; this does not affect the lawfulness of prior processing
In practice, because we store no personal data linked to your identity, most requests will be satisfied by confirming that no such data exists. To exercise any right, contact us via the GitHub issues page. We will respond within 30 days.
You also have the right to lodge a complaint with your national data protection authority (e.g. the ICO in the UK, or your country's DPA in the EU).
Children
This site is not directed at children under 16. We do not knowingly collect data from children.
Changes to this policy
We may update this policy when our practices change. The "last updated" date at the top reflects the most recent revision. Material changes will be noted here.