LiteSpec ("we", "us", "our") operates at litespec.org. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding it. We are committed to handling your data responsibly and transparently.

1. Who We Are

LiteSpec is an independent glass industry reference and tools platform operated from British Columbia, Canada. For privacy-related inquiries, contact us at amrinderbrar148@gmail.com.

2. Information We Collect

2.1 Information You Provide

• Account information, email address and password when you create an account. Accounts are managed by Firebase Authentication (Google); your password is hashed by Firebase and is never visible to us.
• Payment information, if and when paid plans are introduced: billing name, email, and card details at checkout. Payment details are processed exclusively by Stripe and are never stored on our servers.
• Communications, any messages you send us by email.

2.2 Information Collected Automatically

• Usage data, pages visited, tools used, browser type, operating system, and referring URL, collected via Netlify's built-in analytics.
• IP address, collected by Netlify for security, abuse prevention, and geographic analytics.
• Cookies and local storage, we use browser local storage for tool preferences (e.g., unit toggles) and session storage for login redirect handling. We do not use third-party advertising cookies.

2.3 Information from Third Parties

• Stripe, if and when paid plans are active, Stripe shares your email address and payment status with us to confirm and activate your Pro access.
• Firebase (Google), stores your account profile, email, and role metadata (e.g., "pro") in Firebase Authentication and Firestore to manage login and control access to Pro features.

3. How We Use Your Information

Purpose	Data used	Legal basis
Provide and operate the service	Email, account data	Contract performance
Process payments and activate Pro access	Payment confirmation from Stripe	Contract performance
Send billing receipts and account notices	Email address	Contract performance
Respond to support requests	Email, messages	Legitimate interest
Detect and prevent fraud or abuse	IP address, account activity	Legitimate interest
Improve the service and understand usage	Usage data (anonymized)	Legitimate interest
Comply with legal obligations	Any relevant data	Legal obligation

We do not sell your personal information to any third party. We do not use your data for advertising or marketing profiling.

4. How We Share Your Information

We share your data only in the following limited circumstances:

• Firebase (Google), our authentication and database provider. Your account credentials, profile, and role data are stored in Firebase Authentication and Firestore (Google Cloud).
• Stripe, to process payments if and when paid plans are active. Stripe is a PCI-DSS Level 1 certified payment processor. We share your email with Stripe when creating a checkout session.
• Netlify, our hosting provider. The site's files and serverless functions run on Netlify's infrastructure, which processes request data such as IP addresses.
• Legal requirements, if required by law, court order, or government authority, or to protect the rights and safety of LiteSpec, our users, or the public.
• Fraud prevention, we may share information with Stripe, payment networks, or financial institutions to investigate or report fraudulent activity or chargebacks.

We do not share your personal information with any other third parties.

5. Cookies & Local Storage

We use the following browser storage mechanisms:

Name / Type	Purpose	Duration
Firebase Authentication token (local storage)	Keeps you logged in between visits	Until logout / token expiry
ls_return_to (session storage)	Redirects you back after login	Cleared after login
ls_dev_pro (local storage)	Developer bypass for Pro gate testing	Until manually removed
Google Fonts	Font delivery, Google may set cookies	Per Google's policy

We do not use advertising cookies, tracking pixels, or analytics that identify you personally.

6. Data Retention

• Account data, retained for as long as your account is active. If you request deletion, we will remove your account within 30 days.
• Payment records, retained for 7 years to comply with financial and tax regulations, even after account deletion.
• Usage logs, retained by Netlify for up to 30 days.
• Support emails, retained for up to 2 years.

7. Security

We take reasonable technical and organizational measures to protect your data, including:

• HTTPS encryption on all pages.
• Password hashing managed by Firebase Authentication (Google), we never see your password.
• Payment card data handled exclusively by Stripe, we never store card numbers.
• Role-based access control (Pro access controlled by JWT tokens, not client-side code alone).

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify affected users promptly in the event of a data breach.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access, request a copy of the personal data we hold about you.
• Correction, request correction of inaccurate data.
• Deletion, request deletion of your account and personal data (subject to legal retention requirements).
• Portability, request your data in a portable format.
• Objection, object to processing based on legitimate interest.
• Withdrawal of consent, where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at amrinderbrar148@gmail.com. We will respond within 30 days.

Canadian Privacy Law (PIPEDA)

LiteSpec complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access and correct your personal information and to file a complaint with the Office of the Privacy Commissioner of Canada.

GDPR (European Users)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR). Our legal bases for processing are contract performance, legitimate interest, and legal obligation as described in Section 3. You may lodge a complaint with your local data protection authority.

9. Children's Privacy

LiteSpec is not directed at children under 18. We do not knowingly collect personal information from minors. If we become aware that a child under 18 has provided us with personal information, we will delete it promptly.

10. Third-Party Links

LiteSpec may contain links to third-party websites (e.g., standards bodies, product manufacturers). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. For material changes, we will notify you by email at least 14 days before they take effect.

12. Contact Us

---

© 2026 LiteSpec. All rights reserved.