Privacy Policy

Last updated: October 3, 2026

1. Who We Are

Webmargaritas ("we", "us", "our") is a multi-platform growth agency operated by an independent freelancer. We provide marketing services including user acquisition, brand awareness, social proof, and reputation management across platforms such as Telegram, X, Reddit, YouTube, Twitch, and others.

For any questions about this Privacy Policy or your personal data, contact us at:

• Telegram: https://t.me/alex_webmargaritas

2. What Data We Collect

We collect only the data you voluntarily provide to us. There are two situations:

2.1. When You Place an Order (Cart)

• Email address - required to confirm your order and send payment instructions.
• Telegram or WhatsApp contact - optional, for faster communication.
• Competitor or similar project links - optional, to help us understand your target audience.
• Additional notes - optional, any extra details you choose to share.
• Order details - the list of services, quantities, and total price.

2.2. When You Request a Free Consultation

• Your name - required.
• Email address - required.
• Telegram contact - optional.
• Project or website URL - optional.
• Estimated budget - optional.
• Project details and goals - required.
• Competitor links - optional.

2.3. Data We Do NOT Collect

• We do not collect payment card data - all payments are arranged separately.
• We do not require account registration for visitors.
• We do not knowingly collect data from children under 16.

3. How We Use Your Data

We use your personal data strictly for the following purposes:

• To process and fulfil your order or consultation request.
• To communicate with you about your order (via email or Telegram).
• To understand your target audience and tailor our services.
• To protect our website from spam and abuse (rate limiting uses your IP address for up to 15 minutes).

We do not use your data for automated decision-making, profiling, or advertising to you.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contract performance - when you place an order, we need your data to deliver the service.
• Legitimate interest - to protect our website from spam and abuse.
• Consent - when you voluntarily submit optional data (e.g., competitor links, notes). You may withdraw consent at any time.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We share data only with:

• Telegram - order and consultation notifications are sent to our private Telegram chat. Telegram's own privacy policy applies to data stored on their servers.
• Hosting provider - our website and data files are stored on a third-party hosting server. The provider has access to the server but does not access your data directly.

We do not share your data with advertisers, analytics companies, or any other third parties.

6. How Long We Keep Your Data

• Order data - stored for up to 12 months from the order date, then deleted.
• Consultation requests - stored for up to 12 months, then deleted.
• IP addresses for rate limiting - stored in server memory for 15 minutes, then discarded.

You may request earlier deletion at any time (see Section 8).

7. Cookies and Local Storage

Our website uses a minimal set of cookies and browser storage:

7.1. Essential Cookies

• connect.sid - a session cookie created only when an administrator logs into the admin panel. Regular visitors do not receive this cookie. It is used to keep the admin authenticated and expires after 24 hours.

7.2. Browser Local Storage

• cart - your shopping cart is stored in your browser's localStorage. It is never sent to our server until you place an order.
• servicesFilters - your filter selections on the Services page are stored in sessionStorage for your convenience during the session.

7.3. HTTP Cache

To improve performance, our website caches some static resources in your browser, including:

• Images, CSS, JavaScript, and fonts — cached for 7 to 365 days, depending on the file type.
• Public API responses (services list, case studies, reviews) — cached for up to 5 minutes. These contain no personal data.

Personal data you submit through forms (name, email, project details) is never cached — it is transmitted directly to our server via secure POST requests.

7.4. Analytics and Advertising Cookies (Future)

We may add analytics (Google Analytics) and advertising (Meta Pixel) cookies in the future. When we do, this Privacy Policy will be updated, and a cookie consent banner will be shown to visitors before any such cookies are set. You will be able to accept or reject them.

8. Your Rights

Depending on your location, you may have the following rights:

• Right to access - request a copy of the personal data we hold about you.
• Right to rectification - ask us to correct inaccurate data.
• Right to erasure - ask us to delete your data ("right to be forgotten").
• Right to restrict processing - ask us to stop using your data for certain purposes.
• Right to data portability - request your data in a machine-readable format.
• Right to object - object to processing based on legitimate interest.
• Right to withdraw consent - if processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us on Telegram: @alex_webmargaritas. We will respond within 30 days.

9. Data Security

We take reasonable measures to protect your data:

• All communication with our website is encrypted via HTTPS.
• Admin access is protected by a password and session cookie with HttpOnly and SameSite flags.
• Our server follows strict Content Security Policy to prevent XSS attacks.
• Rate limiting protects forms from spam and abuse.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Our website may be hosted on servers located outside your country. By using our website, you consent to the transfer of your data to these servers. We take steps to ensure your data remains protected in accordance with this Privacy Policy.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our website after changes means you accept the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: