SophMate privacy policy

Contact submissions

When you submit the contact form, SophMate stores your name, email, message, selected topic, optional company, optional website URL, optional purchase code, source URL, and privacy consent timestamp. Contact fields that identify you are encrypted at rest, and a one-way email hash is stored for operational lookup.

Tutorial subscriptions

When you subscribe for tutorial updates, SophMate stores your encrypted email address, one-way email hash, subscription status, source URL, consent timestamp, confirmation timestamp, and unsubscribe token. New subscriptions require email confirmation before tutorial updates are sent.

Technical metadata

IP address and user agent values are stored as hashes for abuse prevention and operational review. The raw values are not stored by this application.

CodeCanyon redirects

Purchase CTAs pass through a local redirect so SophMate can record the CTA location and add UTM parameters before sending visitors to CodeCanyon.

Traffic analytics

When analytics is enabled, the site sends a first-party anonymous pageview event that contains the normalized page path, broad device and browser category, external referrer hostname, same-site referrer path, and explicitly provided UTM campaign fields. It does not store raw IP addresses, raw user-agent strings, arbitrary URL parameters, or first-party location data for traffic reporting.

If you allow session analytics, SophMate creates random first-party visitor and session identifiers in your browser's local storage. These are sent only to SophMate, hashed before storage, and used for aggregate session, engagement, and conversion reporting. No analytics cookies are used. You can change this choice at any time with the Privacy choices control in the footer.

When an administrator connects Google Analytics, the Google tag loads only after session-analytics consent and is configured with analytics and advertising storage denied so it remains cookieless. Only the normalized page location and allow-listed UTM campaign fields are provided. Aggregate Google Analytics and Search Console reporting data may also be imported into the private landing admin and is kept separate from first-party totals.

Retention

Contact submissions are purged after the configured retention window of 180 days. Unsubscribed newsletter records follow the same retention window. Detailed traffic, session, and conversion analytics are purged after 90 days. Privacy-safe daily aggregates are purged after 25 months.