Privacy Policy

This policy explains what data LzCtrl collects when you visit lzctrl.com, why we collect it, and how we handle it. If something here is unclear, email info@lzctrl.com.

This policy covers the LzCtrl website only. Each app we ship (Habite, TimeCrunch, theDay, Budgitify) has its own privacy policy linked from the app's page.

What we collect

Newsletter signup

When you subscribe to the newsletter, we store your email address along with the date you signed up and whether you confirmed via the link we send. Your IP address is recorded briefly for rate limiting (to stop bots from spamming the form) and is automatically discarded after one hour.

You can unsubscribe at any time using the link in any newsletter email, or by emailing us. Unsubscribing removes your email from our active list.

Contact form / direct email

If you email us, we keep the email so we can reply and follow up. We don't add you to the newsletter unless you ask.

Third-party services we use

We use a small set of third-party services to run the site. Each one receives only the data it needs.

Cloudflare Turnstile (bot protection)

We use Cloudflare Turnstile on our forms (newsletter signup, contact) to verify that submissions come from real people rather than bots. Turnstile runs invisibly — no CAPTCHA is shown — and collects limited browser and device signals (such as browser characteristics and interaction patterns) to make that determination.

For details on what Cloudflare collects and how it handles that data, see Cloudflare's Turnstile Privacy Addendum: cloudflare.com/application-services/products/turnstile/privacy-addendum.

Google Analytics

We use Google Analytics to understand which pages get visited and how visitors find the site. Google Analytics sets cookies and may collect your IP address (truncated), browser type, device type, referrer, and pages viewed. We do not use this data to identify individual visitors.

See Google's privacy policy for details. You can opt out using Google's Analytics opt-out browser add-on.

Vercel (hosting + Speed Insights)

The site is hosted on Vercel, which receives standard server request data (IP address, user agent, requested URL) needed to serve the site. We also use Vercel Speed Insights to measure page performance; it collects anonymous performance metrics from your browser. See Vercel's privacy policy.

Firebase + AWS SES (newsletter infrastructure)

Newsletter subscriber data is stored in Google Firestore (a Firebase product). Newsletter emails are sent via Amazon SES. Both services receive only what's needed to deliver email to you. See the Google privacy policy and AWS privacy notice.

Contentful (content management)

Blog posts and policy text are served from Contentful. Contentful does not receive personal data about you when you read a blog post.

Cookies

We do not use cookies to identify you personally. Google Analytics sets analytics cookies as described above. Your browser's settings allow you to block or clear cookies at any time.

Your rights

You can:

• Ask what data we hold about you (just email info@lzctrl.com)
• Unsubscribe from the newsletter at any time
• Request deletion of your email and any associated records

For data deletion or access requests, email info@lzctrl.com and we'll respond within a reasonable time.

Changes to this policy

If we change this policy, the "last updated" date at the top changes. Significant changes will be announced in the newsletter.

Contact

LzCtrl LLC · info@lzctrl.com