Privacy Policy
Last updated: October 9, 2026
1. Who is responsible for your data
galinir.com is operated by Gali Nir, an exempt dealer (Osek Patur), Tel Aviv, Israel ("I", "me"). I am the controller of the data collected on this website. For any privacy question or request: gali.nir@gmail.com
2. What data is collected
Data you provide in the contact form
| Field | Required or optional |
|---|---|
| Full name | Required |
| Required | |
| Phone | Optional |
| Message | Required |
You are not legally required to provide this information, and you do so voluntarily. Without a name, email and message the form cannot be sent and I cannot get back to you. If you do not give a phone number, I will reply by email. Please do not include sensitive information (such as medical or financial details) in your message - it is not needed to handle your inquiry.
Data collected automatically while you browse
- Usage statistics: the website uses a built-in statistics tool from Lovable, the platform the site is built on. It records which pages were viewed, which website referred you (referrer), your browser and device type (user agent), your browser language, and an estimated country based on your browser's time zone. To group page views into one visit, it stores a cookie named
session-idcontaining a random identifier, which expires after 30 minutes. This data is used only for aggregate statistics about how the site is used. It is not used for advertising and is not shared with advertising networks. - Security: the infrastructure provider Cloudflare stores a cookie named
__cf_bm, which expires after 30 minutes and is used to distinguish real visitors from bots. As with any website, your IP address is visible to the infrastructure providers while you browse. - Accessibility preferences: if you choose settings in the accessibility menu, they are saved in your browser (localStorage) and are not sent to me.
The website has no advertising pixels (such as Meta or Google Ads), and no third-party advertising or tracking cookies.
3. How the data is used
- To get back to you and handle your inquiry, including quotes and scheduling.
- If we work together - to provide the service, issue receipts and meet legal obligations.
- To understand how the site is used and improve it (aggregate statistics only).
- To keep the website secure.
I do not send promotional newsletters. If I ever want to send you marketing content, I will first ask for your separate consent, and every such message will include an easy way to unsubscribe.
4. Who can see the data
Form submissions are stored in the website's database, and only I access them, through a login-protected admin panel. They are not shown to other visitors and are not sold to anyone.
5. Service providers that receive data
| Provider | What it receives | Purpose | Location |
|---|---|---|---|
| Lovable | Website hosting, statistics data and email notifications sent by the site | Running the website | Sweden (company); the site is served from the global Cloudflare network |
| Supabase | The database that stores form submissions | Storage | European Union (Germany) |
| Tinybird (via Lovable) | The statistics data described in section 2 | Statistics processing | European Union (Germany) |
| Cloudflare | Browsing traffic, including IP address | Security and content delivery | USA, and a global server network |
| Google Fonts | IP address when fonts are loaded from Google's servers | Displaying fonts | USA |
| Google (Gmail) | Emails I receive and send when corresponding with you | Correspondence | USA |
When fonts are served from the website's own server, your IP address is not sent to Google for this purpose.
When you order AI design, the photos you send me are processed with third-party AI tools, as described in the Terms. The tools: ChatGPT (OpenAI, USA), Midjourney (USA), Google Gemini (Google, USA) and Adobe Firefly (Adobe, USA).
6. Transfers outside Israel
Some providers store or process data outside Israel, as listed above. Transfers are made under the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 2001, and subject to each provider's terms of service and data processing agreements.
7. Security
The website is served only over an encrypted connection (HTTPS). Access to form submissions is limited to me, through a secure login. If a security incident affects your data, I will act under the Israeli Privacy Protection (Data Security) Regulations, 2017: investigate the incident, limit the damage, and notify you and the authorities where the law requires it.
8. How long data is kept
- Inquiries that did not lead to a project: 24 months from the last contact, then deleted.
- Clients: data related to a transaction is kept for as long as tax and accounting law requires.
- Statistics: kept in Lovable's system according to its retention policy.
- Cookies:
session-idand__cf_bmexpire after 30 minutes.
9. Your rights
- Access: receive the data stored about you. I will reply within 30 days.
- Correction and deletion: ask to correct inaccurate data or delete data. If I cannot do so, I will explain why in writing.
- Unsubscribe: at any time, using the unsubscribe link in a message or by contacting me.
- Photographs: if a photo of you or your child appears on the site and you want it removed, contact me and I will remove it promptly.
All requests: gali.nir@gmail.com
10. Minors
The website is intended for business owners and adults ordering a service. If you are under 18, please ask a parent to contact me on your behalf.
11. Privacy protection officer
No privacy protection officer has been appointed, as the activity does not require one. For any privacy matter, contact me directly.
12. Changes to this policy
If I change this policy, I will update it on this page together with the date at the top. Material changes will also be shown on the website.