Privacy Policy

This policy explains how Yee (yee.site) processes personal data of account holders and of visitors to Yee and to sites published with Yee. The operator and controller for account, billing and platform data is Yee Site (yee.site).

For data that a site owner collects through their own site—such as form submissions, newsletter sign-ups, bookings, site analytics, their own Google Analytics or custom code—the site owner is the controller and Yee processes supported Customer Data on their behalf as a processor. That relationship is governed by our Data Processing Agreement. Visitors should read the site owner’s notice and contact them first about that data.

Account. Email address, password (stored only as a secure hash by our authentication provider), display name, account photo, plan and sign-in timestamps. If you choose Google sign-in, we receive your Google account identifier, email address, name and profile picture for authentication and account creation. We do not access your Gmail, Google Drive, contacts or other Google account content.

Sites and content. Site names, handles, content, posts, uploaded images and media, settings, SEO and social metadata, favicon, custom code, custom domain names and their connection status. Site and subpage passwords are stored only as hashes.

Billing. Polar processes payments as merchant of record. We receive from Polar your customer and subscription IDs, product, status, renewal date and cancellation state. Polar processes your name, email, billing address, tax ID and payment details under its own privacy policy; we never receive full card numbers.

Shop purchases. When a visitor buys a product from a Yee site, the Buy button sends them to Polar’s hosted checkout. Polar, as merchant of record, collects and processes the buyer’s name, email, billing address, tax details and payment details under its own privacy policy; Yee never receives card or bank details and no payment passes through Yee. To confirm the purchase, show the delivery content and send order emails, Yee reads from the seller’s connected Polar store the checkout or order ID, status, product, amount, currency and the buyer’s name and email. Order history and revenue are read live from Polar and are not copied into Yee’s database.

Form submissions. Information a visitor enters in a site’s contact, newsletter or booking form, which may include name, email, telephone number, company, website URL, message, and chosen date and time, depending on the fields enabled by the site owner.

Site analytics. Page views and link clicks with a random visitor ID, session ID, clicked link and label, referring site, campaign or UTM tags, approximate country, browser, operating system, device type, locale and time. Country may be derived from the request IP through country.is; Yee does not store the IP address in site analytics.

Technical data. Our hosting and network providers process IP addresses, request data and logs to deliver, protect and troubleshoot the service.

Reports and moderation. When someone reports a site, we process the reporter's email address, the reported address, the reason and any details they send. When we review a site, we process its content and the related account details, and we keep a record of our decision.

• Providing your account, editor, sites, storage and custom domains — performance of a contract.
• Billing, subscriptions, tax and accounting records — contract and legal obligation.
• Delivering form submissions and site analytics to site owners — contract with the site owner; legitimate interest of the site owner.
• Security, abuse and spam prevention, rate limiting and fixing errors — legitimate interest.
• Measuring use of yee.site itself with privacy-friendly analytics — legitimate interest.
• Notification emails a site owner switches on (alerts to the owner about new submissions and orders, and confirmations to the visitor or buyer) — contract with the site owner and the site owner’s legitimate interest; they are transactional, not marketing, and each can be turned off in the site’s notification settings.
• Service emails (sign-in, security, billing, important changes) — contract. We do not send marketing emails without consent.
• Enforcing our Terms and keeping Yee safe: reviewing reports, checking sites for content prohibited by our Terms, removing content and suspending accounts, and responding to authorities. Legal basis: our legitimate interest in running a safe and lawful service, and legal obligations where they apply.

Where we rely on legitimate interest you may object at any time.

Yee app. We use necessary browser storage to keep you signed in and remember interface preferences. The yee.site website uses DataFast and Google Analytics to understand use of the service; neither is used by Yee for targeted advertising.

Published sites. When site analytics are active, Yee stores a random visitor identifier in local storage and a visit identifier in session storage, with a new visit after 30 minutes of inactivity. These identifiers are used only for that site owner’s statistics, not for advertising or tracking people across unrelated sites.

Site-owner Google Analytics. A site owner may add a Google Analytics 4 ID. When the owner enables “Ask visitors for consent”, Yee starts both built-in analytics and that Google Analytics tag only after the visitor accepts, and remembers the choice in local storage. If the owner disables the banner, analytics can start without that prompt. The site owner is responsible for selecting a lawful configuration, giving any required notice and obtaining consent where required. Google processes its analytics data under its own policy and may process it outside the EEA.

Custom code and embeds selected by a site owner may use their own cookies or storage. You can clear or block browser storage; clearing authentication storage signs you out, and clearing a site’s storage resets its saved analytics choice and identifiers.

Each site owner can choose whether search engines and AI search tools may index their site and whether AI training crawlers are allowed. Yee publishes these choices in the site’s robots.txt and sitemap. Reputable crawlers follow them, but we cannot guarantee that every third party will. Published content may also be cached or shared by others outside Yee’s control.

Password protection restricts access to site or subpage content, but is separate from search-engine indexing controls. It does not guarantee that an address, previously public content or uploaded media will disappear from search results or third-party caches. Site owners using a page only for personal reference should keep its password private and not share the page publicly.

• Supabase — authentication, database and file storage.
• Google — optional Google sign-in and analytics for yee.site or a site owner’s page.
• Polar — payments, subscriptions, invoices and tax as merchant of record for Yee Pro, and for products that site owners sell through their own connected Polar store.
• Resend — delivery of notification emails (form, booking and order alerts and confirmations) sent from yee.site; it processes the recipient’s email address, the email content and delivery metadata.
• Lovable — application hosting: runs the Yee app, its server functions and every published site.
• Cloudflare — DNS, network, security and routing for yee.site and *.yee.site addresses to the Yee app.
• Vercel — routing and automatic TLS certificates for Pro custom domains, forwarding requests to the Yee app.
• Cal.com — optional booking integration: when a site owner connects Cal.com, visitors’ booking details (name, email, notes, chosen time and time zone) are sent to that owner’s Cal.com account.
• DataFast — website analytics for yee.site.
• country.is — approximate country lookup for site analytics.

Embeds selected by site owners—including YouTube in privacy-enhanced mode, TikTok, Instagram, Spotify, SoundCloud and maps—load only on sites that use them. Loading an embed can disclose your IP address, device information and interaction data to that provider under its own policy.

Some providers may process data outside the EU/EEA, including in the United States. Where required, transfers rely on a valid safeguard such as an adequacy decision, the EU–US Data Privacy Framework or Standard Contractual Clauses. We do not claim that all data stays exclusively in the EU/EEA. We do not sell or rent personal data or use it for targeted advertising.

Disclosure to authorities: we may share relevant account and site data with law enforcement or other authorities when the law requires it, or where legally permitted and necessary to protect someone from serious harm. We limit disclosure to data relevant and proportionate to the request or risk.

Site owners choose which supported fields their contact, newsletter and booking forms collect and which are required. A contact or booking submission does not by itself give permission to send marketing. Site owners must obtain and document valid marketing consent where required and use submissions only for the purposes explained to visitors. Yee processes supported form data for site owners under the Data Processing Agreement.

We keep account and site data while your account exists. Deleting a site deletes its content, submissions and analytics; deleting your account deletes all your sites, media, submissions and analytics. Backups and provider logs may retain residual copies for a limited period before they are overwritten. Billing records are kept for as long as tax, accounting or legal obligations require, including records held by Polar.

Form submissions and site analytics do not currently expire automatically. Site owners can delete submissions and sites using available account tools. We retain data only as needed for the stated purposes, legal obligations, dispute resolution, fraud prevention and service security.

Reports and moderation decisions are kept for up to 2 years after the decision, so we can handle appeals and repeated breaches, unless the law requires us to keep them longer. This applies to moderation records even if the related site or account has been deleted; unrelated account and site data remains subject to the deletion rules above.

Data is encrypted in transit (https). Access is restricted by row-level security so each owner can only reach their own data; passwords are hashed; uploads are limited by type and size; forms are rate-limited. No system is perfectly secure, and we will notify affected users and authorities of a personal data breach where the law requires.

Under the GDPR and similar laws you have the right to access, correct, delete, restrict, receive a copy of (portability) and object to the processing of your personal data, and to withdraw consent at any time. You can edit or delete most data yourself in the app, including deleting your account. For other requests, email us; we answer within one month. You may also complain to your local data protection authority.

If your data was submitted through someone’s Yee site, contact that site owner first; we will help them respond.

Yee is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

We will update this page when our practices or providers change and will notify account holders of material changes by email or in the app before they take effect.

If you have a question about this policy, about the data we hold or about exercising your rights, write to us on yee.site/contact and we will get back to you.