Legal

Privacy Policy

Last updated: May 14, 2026

1. Who we are

Mark ("we", "us", "the Service") is operated by Usama Navid. We provide a hosted platform for creating and deploying call-to-action widgets on third-party websites.

2. What data we collect

From you, the account holder, we collect:

  • Email address, name, and password hash — required to create and authenticate your account.
  • Google account identifiers (if you sign in with Google) and Google Tag Manager OAuth tokens (if you connect GTM) — required to deploy widgets to your tag manager on your behalf.
  • Widget configuration data (images you upload, destination URLs, UTM parameters).
  • Stripe customer + subscription identifiers, if you pay us.

From end-users (readers of blog posts where your widgets are embedded), we collect anonymised event records:

  • Widget impression and click events with timestamp. We do not set cookies, fingerprint browsers, or collect personally identifiable data about your readers.

3. How we use it

Account data is used to provide the Service, send transactional emails (e.g., password resets), and process billing. Widget event data is shown to you in aggregate to compute conversion metrics.

We do not sell your data to anyone. We do not share it with advertisers. We do not use it to train any AI model.

4. Where it lives

All data is stored on a single VPS in Falkenstein, Germany, operated by Hetzner Online GmbH. Backups are encrypted at rest. We do not use any third-party SaaS for storage except Stripe (for billing) and Google (for OAuth flows you initiate).

5. Your rights

You can export all your data as CSV from your account settings at any time. You can delete your account, which permanently removes all account data + widget configuration + event records within 30 days. Email privacy@blogctas.com for any data request.

6. Cookies

We set one cookie: better-auth.session_token, which keeps you signed in. It is HTTP-only, Secure, SameSite=Lax. We do not use any analytics or advertising cookies on our marketing site.

7. Contact

For privacy questions, email privacy@blogctas.com.