Privacy Policy

WebCloner (“we”, “our”, “us”) respects your privacy. This policy explains what data we collect, why we collect it, and how we handle it when you use our website recreation, migration, and download service at webcloner.tech.

1. Information We Collect

1.1 Account Information

When you register, we collect your name and email address. If you sign up via Google or GitHub OAuth, we collect the name and email associated with that provider. We also collect your IP address, browser user agent, and basic device information (screen resolution, operating system) for analytics and security purposes.

1.2 Website Processing Data

When you use our service, we collect the URL you submit for cloning, metadata about the cloned pages (page count, asset count, file size, elapsed time), and the cloned website files themselves. These files are stored temporarily — previews are automatically deleted after 1 hour, and download files (ZIP, feeds) are deleted after 7 days.

Users are responsible for ensuring they have the necessary rights, permissions, or legal authority to process, download, reproduce, or recreate any website content submitted through the Service.

1.3 Payment Information

We accept payments for Pro ($10/month) and Business ($25/month) plans. All payments are processed through DodoPayments. We do not store full credit card numbers or bank details. DodoPayments may collect billing information such as your name, email, phone number, and billing address. DodoPayments' own Privacy Policy and Terms of Service apply to their processing of your payment data.

1.4 Session & Device Data

We use encrypted session cookies to keep you logged in. We also collect your IP address for rate limiting and abuse prevention. This data is retained only as long as necessary for security purposes.

1.5 Communication Data

If you contact us via email, we retain the contents of your message and your email address to respond to your inquiry.

2. How We Use Your Information

• To provide and maintain the website cloning service
• To process payments and manage your subscription
• To send service-related emails including account verification, password reset links, order confirmations, and billing receipts
• To enforce rate limits and prevent abuse of the service
• To analyse website traffic and usage patterns using Google Analytics to improve our service
• To troubleshoot technical issues and enhance user experience

3. Data Sharing

We share your data only with trusted third-party service providers who help us operate the service:

• DodoPayments — payment processing (name, email, billing details). See their Privacy Policy and Terms of Service.
• Google Analytics — website traffic and usage analytics (anonymized IP, page views, session data)
• Google & GitHub — OAuth authentication (name, email) — only if you choose to sign up via these providers
• Email provider (Brevo) — sending transactional emails (email address)

We do not sell your personal information to third parties.

4. Data Retention

• Account data: retained until you delete your account
• Cloned site files: previews are deleted after 1 hour, download files after 7 days
• Clone metadata: retained as part of your usage history for billing and quota enforcement
• IP logs: retained for up to 30 days for security analysis
• Payment records: retained as required by tax and accounting regulations

5. Your Rights

You have the right to:

• Access your personal data — view it in your Account settings
• Export your data — request a copy of your data
• Delete your account and associated data — via Account settings
• Correct inaccurate data — update your profile in Account settings

To exercise any of these rights, contact us at admin@webcloner.tech.

6. Cookies

We use the following types of cookies:

• Session cookie: keeps you logged in across page loads (essential)
• Connect.sid: MongoDB session store identifier (essential)
• Google Analytics cookies (_ga, _gid, _gat): used to analyse website traffic and usage patterns. These are first-party cookies and do not personally identify you.

You can opt out of Google Analytics cookies by installing the Google Analytics opt-out browser add-on.

7. Security

We implement reasonable security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Password hashing with bcrypt (12 rounds)
• Rate limiting to prevent brute force attacks
• Helmet security headers (CSP, X-Frame-Options, etc.)
• Input validation and sanitization

8. Third-Party Links

Our service may contain links to third-party websites (e.g., cloned sites). We are not responsible for the privacy practices of those sites. Websites processed through our Service may contain content owned by third parties. Users are responsible for complying with applicable copyright, intellectual property, and usage restrictions associated with such content.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

10. Contact

If you have any questions about this privacy policy, please contact us at:

Email: admin@webcloner.tech
Website: webcloner.tech