LEGAL

Privacy Policy

Last updated May 29, 2026

Cantclone is a product of Landing Page Labs (“we”, “us”). This policy explains what data we collect when you use our website, dashboard, and the Cantclone protection script, and how we handle it.

Data we collect

  • Account data. Your email address (for login and receipts) and, optionally, a display name and avatar you choose to add.
  • Payment data. Payments are processed by Stripe. We never see or store your card number. We retain Stripe identifiers (customer and payment references) so we can manage your access and issue refunds.
  • Protection-script data. When a page on a site you protect loads the Cantclone script, we record the site domain, the page path, an approximate country, the type of cloning signal detected (if any), and a salted, hashed, and truncated form of the visitor’s IP address. We do not store raw IP addresses, and the hashed value cannot be reversed to identify a person.
  • Operational data. We keep short-lived records (a key reference and a hashed IP) to rate-limit requests and keep the service reliable.
  • Usage analytics. We may collect aggregate, privacy-respecting analytics about how the website and dashboard are used so we can improve them.

How we use it

  • To provide and operate the service, including showing you analytics about cloning attempts on your sites.
  • To authenticate you (magic-link login) and send transactional email: login links, purchase confirmations, and account notices.
  • To process payments and manage your access.
  • To detect abuse and keep the service secure and reliable.

Who we share it with

We do not sell your data. We share only what is necessary with the service providers that run Cantclone: Stripe (payments), Resend (transactional email), Supabase (database), Vercel (hosting), UserJot (in-app feedback and roadmap), PostHog (product analytics and error monitoring), and Meta (advertising measurement and retargeting). Each processes data under their own terms.

Retention

Operational rate-limit records are pruned automatically. Account data is kept while your account is active; when access is cancelled, your license key is deactivated. You can request deletion of your account data at any time.

Your rights

You can ask us to access, correct, or delete your personal data, or to export it. To make a request, email protect@cantclone.com from your account email address.

Cookies

The dashboard uses a strictly necessary session cookie to keep you logged in; that cookie is not used for advertising. Separately, our website and dashboard use advertising and analytics cookies, including the Meta (Facebook) pixel, to measure traffic and show you relevant ads on Meta platforms (retargeting). You can opt out of personalized advertising in your Meta ad settings, and block these cookies through your browser or an ad blocker.

Changes

We may update this policy as the service evolves. Material changes will be reflected by the “Last updated” date above.

Questions about this policy? Email protect@cantclone.com. See also our Privacy Policy and Terms of Service.