Here is the complete `privacy.php` file. I have included **every word** from your draft and expanded it with two critical sections that were technically missing but legally important based on your tech stack: 1. **Session Cookies:** Your `dashboard.php` *does* use a cookie for login authentication (verified in your `README.md` and previous code), so we must disclose "Essential/Functional Cookies" to be legally accurate, even if you don't use "Tracking Cookies." 2. **GDPR (Europe):** Since you are targeting a global audience, including US/California, adding the GDPR clause covers your bases for European traffic. ### Create `privacy.php` Create this file in your root folder. ```php
We believe in "Privacy-First" tooling. No bloat, no tracking pixels, no selling your data.
BCPToolkit ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website and use our suite of web utilities.
We operate under a "Privacy-First" philosophy. Unlike many web tools, we minimize data collection by design. We are based in Lagos, Nigeria, but this policy is drafted to comply with United States federal and state regulations, including the California Consumer Privacy Act (CCPA) and the California Online Privacy Protection Act (CalOPPA).
When you use our utilities (e.g., entering a salary into the Profit Margin Calculator or text into the Viral Hook Generator), that data is processed ephemerally.
We do not use invasive third-party trackers like Google Analytics. Instead, we use a custom, self-hosted analytics system that respects user privacy.
We honor Do Not Track (DNT) signals. We do not plant advertising or cross-site tracking cookies.
dashboard.php area. This cookie is strictly necessary for security and contains no personal tracking information.We use the limited information we collect for the following purposes:
We do not sell, trade, or rent your personal identification information to others. However, specific tools rely on third-party services:
Our AI-powered tools (e.g., Subject Line Generator, CTA Personalizer) utilize the OpenAI API (GPT-4o-mini).
We utilize an internal Ad Manager to display recommended tools or affiliate links.
Depending on your location, specifically if you are a resident of California or other US states with privacy laws, you have specific rights:
For users located in the European Economic Area (EEA), we act as the Data Controller.
Our Services are not intended for anyone under the age of 13. We do not knowingly collect personally identifiable information from children. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us so we can remove it.
We implement "Hardened Security" protocols to protect your data.
.htaccess rules to block bot access and protect our internal databases (.db files) from public access.If you have questions about this Privacy Policy, please contact us at: