nicesite

Privacy Policy

Last updated

nicesite is run by Lightn Ventures, LLC, a New York limited liability company (“we”, “us”). This explains what we collect, why, who else gets it, how long we keep it, and what you can do about it.

What we collect

Why we use it

Once you publish your site, it’s public: anyone can see it and search engines can list it. Pages you make private are the exception: only people with your password can see them.

We don’t sell your personal data, and we don’t share it for advertising.

Your chat with the editor

Your chat is stored with your site so the editor can pick up where you left off. To answer each message, we send it, with your site’s content, to an AI model through OpenRouter. Your chat is deleted when your site is.

Screening for abuse

When you publish, we send your site’s new text to OpenAI to check it for abuse, such as hateful, sexual, or violent content. We do the same for each photo you add. Most checks find nothing; we keep only a fingerprint of checked text, so the same text isn’t sent twice.

If something is flagged, we keep it so one of us can review it, and your site stays up while we do. If we decide it breaks our terms, we take the site offline and tell you why, and you can reply to appeal.

Messages you send us for help

When you send us a message from “get help from a human”, it’s emailed to us through Resend, with your name, email address, plan, site, and when you joined, so we can answer you. It’s kept in our inbox for as long as we need it to help you, and it’s not stored in nicesite itself. If you email us instead, your email works the same way.

Who else gets it

We use these companies to run nicesite. Each gets only what it needs for its job:

If you paste a link to a website, we fetch that page to find your name, photo, and bio.

We may also share data when the law requires it, to protect someone from harm, or if nicesite is sold or merged (this policy would still apply).

Cookies

nicesite.build sets a sign-in cookie (sometimes split into a few parts) that keeps you signed in, or, before you save your site with an email, keeps your site yours in this browser. It lasts up to 400 days. While you sign in with an email code, a second cookie lasts an hour.

We also use PostHog analytics cookies and browser storage, to tell visits from the same browser apart. In the EU, EEA, UK, and Switzerland, we ask before setting them. Everywhere else they’re on unless you turn them off with “cookie settings” at the bottom of our pages. If your browser sends Global Privacy Control, they’re off. With them off, we still count visits, without remembering your browser. Your cookie choice itself is kept in your browser.

Sites you publish with nicesite set no cookies for analytics. If you make a page private, your site sets one cookie in a visitor’s browser after they enter the right password, so they don’t have to enter it again for a year. It sets nothing else. The quick check sometimes shown after a contact message or signup is run by hCaptcha, which may set its own cookies.

A published site with a video loads the player from YouTube or Vimeo in privacy mode. When someone visits it, YouTube or Vimeo may store data on their device under their own privacy policies: Google’s and Vimeo’s.

A published site can also show a booking page, form, map, song, or video from one of these services, which loads in its own frame when someone visits it and may store data on their device under its own privacy policy: Calendly, Cal.com, Spotify, Loom, SoundCloud, Google Maps, Typeform, and Google Forms. On a site’s own domain, its owner can also show a page from another address; that page loads under its own site’s policy.

Visitors to sites you publish

Sites published with nicesite count their visitors for their owner, without cookies. For each visit we record the page and its title (without anything after a “#” in its address, and without anything after a “?” except campaign tags such as “utm_source”), the address of the page that sent them (without anything after a “?”), their country, region, and city, their browser, operating system, type of device, screen size, and language. We also record which other website, email address, or phone number a visitor clicks through to, by the website’s name or as “email” or “phone”, never the address or number itself, and that a message was sent through the site’s contact form, without what it says. We use the visitor’s IP address to tell visitors apart and find where they are, but it is not stored. The counting runs on Umami, which we run ourselves on Vercel and Supabase.

Only the site’s owner sees these numbers, in “who’s visiting” in the editor. They are kept for 12 months. While a site is on a paid plan they are kept for as long as it stays paid, and for 12 months after that. They are deleted with the site.

When an owner opens their own site from the editor, nicesite stores a small flag in that browser, on the site’s address, so their own visits aren’t counted. It holds no identifier. Clearing that site’s data in your browser removes it.

When someone sends a message through a site’s contact form, we store their email address and their answers to the questions the site’s owner chose to ask (such as their name, phone number, or message) for that site’s owner, and email the message to the owner. The site’s owner decides what their form asks and is responsible for it. We use their IP address only to limit spam, and it is not stored. The owner can read, download, and delete messages in the editor, and they are deleted with the site.

When someone joins a site’s email list, we store their email address for that site’s owner. We don’t send them email ourselves: the owner can download and delete the list in the editor, and uses their own tools to write to it. We use their IP address only to limit spam, and it is not stored. The list is deleted with the site.

A site’s owner can choose to send the messages and email-list signups their site receives to a Google Sheet in their own Google account, or to a web address they choose, such as an automation tool. We then send each one there as it arrives, and the ones already received when they connect. What happens to them there is up to the owner and that service. Possible spam is never sent.

If a contact message or email-list signup looks automated, we save it and may ask its sender to do a quick check run by hCaptcha before it goes through. hCaptcha gets their IP address and browser details and may set its own cookies; it never gets their message or email address. The message or signup is kept whether or not they finish the check.

How long we keep it

We keep your site, photos, and chat until you delete them, including sites that haven’t been saved with an email yet.

When you delete your account or site, we keep a copy for up to 30 days, so we can bring it back if you ask; then we remove it.

We keep payment records as long as tax law requires. Analytics and error reports are kept for a limited time set by those services.

Your choices

In settings in the editor you can download everything we have about you and your site, change your email, and delete your account or site. To stop tips about your site, use the unsubscribe link in any tip email; you’ll still get sign-in codes and emails about your plan and domain. The “cookie settings” link at the bottom of our pages changes your cookie choice.

For anything else, like a correction or a question, email hi@nicesite.build. We answer within 30 days.

Where your data lives

nicesite is run from the United States, and your data is stored and processed there and by the companies above, wherever they work.

Children

nicesite isn’t for children under 13. If you think a child under 13 has given us their data, email hi@nicesite.build and we’ll delete it.

If you used realnice

Lightn Ventures, LLC also runs realnice. If you had a realnice site, we may move it to nicesite: we’ll tell you before we do, then make your nicesite account from your realnice details (name, email, site, and domains). You can delete it any time.

Keeping it safe

Everything travels encrypted, and only the founders can open our database. No system is perfect; if something goes wrong that affects you, we’ll tell you as the law requires.

Changes to this policy

If we change this policy in a way that matters, we’ll tell you by email or in the editor before it applies, and update the date at the top.

Contact

Lightn Ventures, LLC, New York. Email hi@nicesite.build.

To report abuse or copyright infringement on a nicesite site, email abuse@nicesite.build.