Essential sign-in storage
Administrator sign-in uses browser storage to keep the authentication session until sign-out or expiry, with token refresh while signed in. Language is selected through the page URL and is not saved in a preference cookie. No advertising pixels or optional cookie-based analytics are installed. There is no consent-choice cookie or optional-cookie switch, because the app does not set optional cookies. You can clear site data in your browser; this signs you out.
Privacy-friendly visitor analytics
Lovable collects this data for us. Its analytics uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. It records pages visited, referral sources, country, browser, operating system, device type, time on page, loading speed, errors and clicks. With no consent banner, these are recorded for every visitor. Detailed data is kept for 90 days and daily summaries for one year. See Lovable’s privacy policy at https://lovable.dev/privacy.
Security and service providers
Lovable Cloud provides hosting, storage and authentication. Access rules restrict private enquiries to administrators. Anti-spam checks use a hashed network identifier and submission counts; raw IP addresses are not stored in the enquiry table. Google Fonts receives font requests, including ordinary network information. Google and Lovable receive sign-in information only when their sign-in methods are used. Authentication emails are sent by Cloud Auth.