LaravelSitesHub

This Privacy Policy explains what information LaravelSitesHub collects, why we collect it, and what we do with it. We do not sell your data. We do not display third-party advertisements on this website, and we do not run remarketing or personalized advertising. We do measure aggregate site usage and advertising conversions, but only with your prior opt-in consent as described below.

Information You Give Us

Account details: your name and email address when you register, plus a password that is stored only as a one-way hash — we never see or store it in readable form. You may optionally upload a profile picture.
Purchase records: when you buy an app we record which app you bought, the amount and currency you were charged, the date of purchase, and the payment and order references issued by Razorpay.
Contact form submissions: the name, email address, subject, and message you send us.

Information We Record Automatically

Download activity: which app files you download, when, and the release version you received. This is what powers the "update available" indicator on your dashboard and our download counts.
Server logs: our hosting infrastructure records standard request logs, which include IP address, browser type, timestamp, and the pages requested. These are used for security, abuse prevention, and diagnosing faults.

Payment Information

We never receive or store your card, UPI, or net banking details. Payments are collected entirely by our payment processor, Razorpay, on their own hosted checkout. What comes back to us is limited to a payment identifier, the amount, the currency, and whether the payment succeeded. Razorpay's handling of your payment data is governed by their privacy policy.

Cookies and Local Storage

We use strictly necessary cookies to run the site, and optional analytics and advertising cookies only if you opt in through the cookie banner. No optional Google tag is loaded until you consent, and declining or ignoring the banner means no analytics or advertising scripts run at all.

Session cookie: keeps you signed in and remembers your currency preference (INR or USD) as you browse.
CSRF token cookie: a security cookie that protects forms against cross-site request forgery.
Cookie consent choice: stored in your browser's local storage (not a cookie) so we remember your analytics and advertising choices, including when you made them, and don't ask you again on every visit.
Analytics cookies (only with analytics consent): Google Analytics first-party cookies set on our domain, which may include _ga and _ga_<container> (up to 2 years). They distinguish visits for aggregate usage measurement.
Advertising cookies (only with advertising consent): Google Ads first-party cookies set on our domain that store ad-click information, which may include _gcl_aw, _gcl_gb, _gcl_au, and _gac_gb_<id> (up to 90 days). They attribute a later purchase to the ad click that led to it.

The session and CSRF cookies are strictly necessary for the site to work and cannot be switched off. You can change or withdraw your analytics and advertising choices at any time through the "Cookie Preferences" option in the footer, which re-opens the banner. Withdrawing consent stops future collection but does not delete cookies already set; you can also clear or block cookies through your browser settings, but blocking the necessary cookies will prevent you from signing in or completing a purchase.

Analytics

We use Google Analytics 4 to understand how the site is used in aggregate. The analytics tag is only loaded after you opt in to analytics on the consent banner — if you decline, or simply ignore the banner, no analytics script is loaded and no analytics data is sent. When loaded, it reports page views and standard technical details (device, browser, approximate region derived from IP). Google Analytics does not log or store your full IP address; the address is used to derive approximate location and is then discarded. You can review Google's practices in the Google Privacy Policy and Google's cookie documentation.

Advertising and Conversion Measurement

We measure whether our own Google Ads campaigns led to a purchase. The Google Ads tag is only loaded after you opt in to advertising on the consent banner — if you decline, or ignore the banner, no advertising script is loaded and no conversion is reported.

When you have opted in and complete a purchase after clicking one of our ads, the purchase confirmation page reports a single conversion event to Google Ads containing only: the purchase amount and currency, a non-personal order reference (your invoice number, used solely to deduplicate reloads), and the ad-click identifiers from the URL or first-party advertising cookies (such as GCLID), plus the standard technical details Google needs for measurement and fraud prevention (truncated IP, device and browser type, timestamp). Your name, email address, and payment details are never sent to Google.

Conversion measurement is not remarketing. Personalized advertising stays switched off at all times: the tag is configured with personalization signals disabled (allow_ad_personalization_signals), and consent for personalized advertising is never requested or granted. We do not build remarketing lists, we do not show personalized ads, and Google is instructed not to use this data for personalized advertising.

How We Use Your Information

To create and secure your account, and to verify your email address.
To process your purchase, grant download access, and issue your invoice.
To send transactional email — purchase confirmations, email verification, and password reset links. We do not send marketing email.
To respond to enquiries you send through the contact form.
To understand aggregate site usage and measure advertising campaign effectiveness — only where you have opted in.
To detect abuse, prevent fraudulent transactions, and keep the platform running.

Who We Share It With

We share personal information only with the service providers required to run the platform: Razorpay for payment processing, our email delivery provider for transactional messages, our hosting provider, and — only where you have opted in — Google (Google LLC, United States) for analytics measurement and ads conversion reporting as described above. Data sent to Google may be processed in the United States subject to Google's safeguards. We do not sell or rent your information, we do not share it for remarketing or personalized advertising, and we have no on-site display advertising partners.

How Long We Keep It

Account and purchase records are retained for as long as your account exists, because your continued access to the apps you bought — and your invoices — depend on them. Incomplete or abandoned checkout attempts are retained briefly and then automatically deleted. Contact form submissions are kept until the enquiry is resolved and reviewed periodically thereafter. Analytics and advertising cookies expire as stated above (up to 2 years for analytics, up to 90 days for advertising); data Google receives is retained under Google's own retention policies.

Children's Information

This Platform is intended for adults. We do not knowingly collect personal information from children under the age of 13. If you believe a child has provided us with such information, please contact us and we will delete it promptly.

Your Rights

You have the right to:

Access the personal information we hold about you.
Correct inaccurate information — your name, email address, and profile picture can be changed from your account at any time.
Request deletion of your personal information, subject to any records we are required to retain for tax or accounting purposes.
Change or withdraw your analytics and advertising consent at any time through the "Cookie Preferences" option in the footer, with effect for future collection.

To exercise any of these rights, please contact us through our contact page. If your concern remains unresolved, you may also approach India's Data Protection Board once its grievance mechanism is operational.

Online Privacy Policy Only

This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in LaravelSitesHub. This policy is not applicable to any information collected offline or via channels other than this website.

Consent

Using our website acknowledges this Privacy Policy. Strictly necessary processing described here happens so the site can function. Analytics and advertising measurement happen only if you opt in through the cookie banner, and you may withdraw that opt-in at any time as described above.