Privacy Policy

Information we collect

We collect only what we need to provide and protect the service:

• your name, email address and Google profile details when you sign in with Google;
• project choices, preferred dates, messages, briefs, references and files you choose to submit;
• order, payment status and transaction references. PayPal handles your payment credentials; we do not store your card or PayPal password;
• essential session cookies and limited technical information such as IP address, device/browser details and security logs.

How we use information

We use it to prepare estimates, process and confirm orders, provide the client workspace, create and deliver your project, answer support requests, prevent abuse, keep records and meet legal obligations. The usual legal bases are taking steps at your request, performing our agreement, our legitimate interests in operating a secure service, and legal obligations. Where consent is required, you may withdraw it for future use.

We do not sell personal information or use it for targeted advertising. We do not make decisions with legal or similarly significant effects using solely automated profiling.

Services we use

We share information only where needed with service providers that help us run 48HRS: Cloudflare for hosting, storage, security and email; Google for optional sign-in; PayPal for payment processing; Telegram for internal project-request notifications; and Sanity for published editorial content. Client orders and files are kept outside the editorial CMS. These providers may process data in other countries under their own legal obligations and safeguards.

PayPal processes payment information under its own privacy statement. We may also disclose information when required by law or to protect people, the service, or our legal rights.

Cookies and security

48HRS currently uses essential cookies for sign-in, session security and the requested functionality. We do not currently use advertising cookies. We use access controls, private storage and other reasonable safeguards, but no online service can guarantee absolute security.

Optional visit statistics

If you allow it, Counterscale on Cloudflare records public page paths, referring domains, campaign labels, country and browser or device information. It does not receive account pages, project details, form answers, payments or uploaded files. Arbitrary query strings and URL fragments are excluded.

We keep the analytics preference on your device for up to 180 days and a daily visit count without a unique visitor ID. Cloudflare Analytics Engine retains the statistics for up to 90 days. You can decline or withdraw permission below. Withdrawal stops future collection and removes the stored visit count.

Retention and your choices

We retain information only as long as reasonably needed for the project, account access, support, security, tax, accounting and legal requirements. Retention periods vary by record and applicable law. We delete or de-identify information when it is no longer needed, unless we must keep it.

Depending on where you live, you may ask to access, correct, delete, restrict or receive a copy of your personal information, or object to certain processing. You may also complain to your local data protection authority. We may need to verify your identity before completing a request.

Children and changes

48HRS is a business service and is not directed to children under 18. We may update this policy as the service changes. The effective date above will show the latest revision.

Contact

For privacy questions or requests, email hello@48hrs.cc.