Privacy Policy

Last updated Oct 12, 2026

This policy explains what information we collect when you use legit50.com, how we use it and what choices you have. We keep it as short as we can.

Who we are

Legit50 is operated by an independent publisher based in the European Union. The operator is the data controller for this site. For all privacy questions, use the contact form.

Our document tools keep your data in your browser

The invoice, estimate and receipt generators run entirely in your browser. What you type into them — names, addresses, line items, amounts — and any logo you upload are saved in your browser’s local storage so you can come back to your work. This data is never sent to our servers, and we cannot see it. You can delete it at any time by clearing the tool or your browser’s site data.

What we collect

• Usage data (Google Analytics 4). Pages viewed, how you use the tools (for example, that a PDF was downloaded, but not what it contains), approximate location, device and browser type. Google Analytics uses cookies and similar identifiers. We use Google Consent Mode v2: in the European Economic Area, the UK and Switzerland, analytics and advertising cookies stay off until you agree. Elsewhere they are on by default, and you can opt out as described below.
• Cookieless statistics (Cloudflare Web Analytics). Page views and performance data, counted without cookies and without tracking you across sites.
• Technical data. Our hosting and security provider, Cloudflare, processes your IP address and request details to deliver pages and protect the site from abuse.
• Messages you send through the contact form. Your message, your name (optional), your email address (optional, only if you want a reply), the time you sent it and the country your request came from (as detected by Cloudflare from your IP address). We do not store your IP address with the message. To limit spam, we keep a one-way hash of your IP address for up to one hour to count how many messages were sent from it. Messages are stored in Cloudflare Workers KV and used only to reply to you and handle your request.

We do not require your name, and we do not sell lists of email addresses or other personal information for money.

Advertising

We plan to show ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google’s use of advertising cookies lets it and its partners serve ads based on those visits.

• Learn more: How Google uses information from sites or apps that use our services.
• Opt out of personalized ads from Google: Google Ads Settings. You can also opt out of some third-party vendors at aboutads.info.

Some links on the site may be affiliate links. If you click one, the partner may set its own cookies to record that you came from Legit50. See our disclosures.

Cookies and local storage we use

• l50_consent — remembers your cookie choice in the EEA, UK and Switzerland (180 days).
• l50_optout — remembers that you opted out of the sale or sharing of personal information (1 year).
• Local storage keys starting with l50: — drafts, saved templates and settings for the document tools. Stays on your device until you delete it.
• Google Analytics cookies (such as _ga) and, once ads are live, Google advertising cookies — only where allowed by your consent choice.

Visitors in the EEA, UK and Switzerland can change their choice at any time.

How long we keep data

• Google Analytics data: 14 months, then deleted automatically.
• Contact form messages: up to 12 months, then deleted automatically. We may delete them sooner once your request is handled.
• Document tool data: on your device only, until you delete it.

Who we share data with

We use service providers to run the site: Google (analytics and, later, ads) and Cloudflare (hosting, security and cookieless statistics). These providers may process data outside your country, including in the United States, under the data transfer safeguards those providers offer. We may also disclose information if the law requires it.

Your rights in the EEA, UK and Switzerland (GDPR)

We use analytics and advertising cookies only with your consent. We rely on our legitimate interest to keep the site secure, to count visits without cookies and to answer messages you send through the contact form. You have the right to:

• access the personal data we hold about you and get a copy;
• have it corrected or deleted;
• restrict or object to its processing;
• data portability;
• withdraw your consent at any time, without affecting earlier processing;
• lodge a complaint with a data protection supervisory authority, for example in the country where you live.

To use these rights, use the contact form and start your message with “Privacy request”. Include an email address so we can reply. Because we do not ask for your name or account details, we may need information from you (such as a cookie ID) to find your data.

Your rights in US states (CCPA/CPRA and similar laws)

Residents of California and other states with privacy laws have rights over their personal information. We collect these categories of personal information for the purposes described above: identifiers (such as cookie IDs and IP addresses) and internet activity (such as pages viewed). Allowing advertising and analytics cookies may count as “selling” or “sharing” personal information for targeted advertising under these laws.

• Opt out of sale or sharing: use Your Privacy Choices.
• Global Privacy Control: we treat a GPC signal from your browser as a valid opt-out request.
• Know, correct and delete: use the contact form. You can use an authorized agent.
• No discrimination: the site works the same whether or not you use these rights.

We do not knowingly sell or share the personal information of anyone under 16, and we do not collect sensitive personal information.

Children

Legit50 is meant for business owners and is not directed at children under 13 (under 16 in the EEA). We do not knowingly collect their personal information.

Changes to this policy

We will update this page when our practices change, for example when ads go live, and change the “Last updated” date above.