Privacy Notice

1. Scope

• This notice covers the website lightningeg.com (the “site”), in English and Arabic.
• It does not cover the Lightning app. The app has no account and no analytics, and keeps financial data only on your own devices.
• The app connects to the internet only to look up prices of holdings you record.

2. Essential Analytics

• Applies to every visitor, whatever you choose in the banner. Nothing is stored on your device.
• GoatCounter, an open-source analytics service that sets no cookies, counts page views and the events described below. It may tell page views of one session apart for a few hours, using a temporary value derived from your connection. It does not store your IP address.
• Lightning also keeps its own anonymous record of each page view, in a private Google Sheet, through a Google Apps Script that Lightning runs. These records are deleted after 90 days.
• On every page of the main site, the same record, without the identifiers in section 3, is also kept in Lightning’s account database at Supabase, in Europe, so Lightning can see visits next to sign-ups and which looks are tried and bought. It is deleted after 90 days and never linked to an account.
• A record holds: the page and its release ID; language; device type (phone, tablet or computer), operating system and browser family; the referring site and campaign tags (utm_source, utm_medium, utm_campaign); when you arrive from another page of this site, that page's name; how far down the page you scrolled; how many seconds you were active; how fast the page loaded.
• A record also holds a timeline of what appeared on screen or was pressed, with the second each happened: sections, buttons and links, the menu, questions opened, screenshots enlarged, the calculator used, a form started or sent, taps on things that are not buttons, and on the store which look was tried or opened and when a wallet was short.
• A record also holds error codes, such as a picture that failed to load, a script that crashed or the visit counter being blocked, and the name (never the contents) of a form box that the browser refused.
• A record carries a random number made for that page view only. It is held in memory, never stored on your device, and does not link your page views together.
• A record never holds the contents of any field, such as amounts in the calculator or an email being typed, and never holds names, email addresses or IP addresses.
• Only Lightning reads the records and totals, behind a key. Lightning also reads GitHub’s own download count for each app file, which holds nothing about you.

3. Linked Visits

• Applies only if you select Allow all. It uses your browser’s storage, which works like a cookie.
• Your browser creates a random visit identifier, held in session storage and deleted when the tab is closed.
• Your browser creates a random visitor identifier, held in local storage for 90 days, to tell first visits from return visits.
• Each page sends the events listed in section 2, with these identifiers, the page, device type (phone, tablet or desktop), language, referring site and campaign tags (utm_source, utm_medium, utm_campaign).
• The data is sent to a Google Apps Script run by Lightning and stored in a private Google Sheet.
• Records older than 90 days are deleted daily.
• Only totals are shown outside the sheet.

4. Not Collected

• Names, email addresses or phone numbers, except in forms you submit (section 5) and in a For Geeks account you create (section 6).
• IP addresses.
• Device fingerprints.
• Advertising or social media trackers.
• Session recordings or heatmaps.
• No data is sold or shared for advertising.

5. Forms

• The survey, email signup and feedback text are sent when you submit them. Feedback screenshots upload when selected and stay in temporary cache for up to six hours if not submitted; submitted screenshots are stored in a private Drive folder.
• Submissions are stored in private Google Sheets.
• Email addresses are used only to invite you to try new features early and to send news of new builds.
• To request deletion, use the feedback form on Downloads.

6. For Geeks Accounts

• Applies if you create a Lightning website account, including the marketplace, community stories and For Geeks. The Lightning app, its download and the rest of the site never need an account.
• Accounts are stored by Supabase, in Europe, for Lightning. If you sign in with Google, Google shares your email address, name and picture with Supabase; Lightning uses only the email, to sign you in.
• Required: your email address. It stays private and is used only to sign you in and to reach you about your account.
• Optional and private: your name, phone number and birth date. Only you can see them. The phone number is used only to reach you about your account; the birth date is never shown.
• Optional, and shown only as you choose: a display name, picture link, bio, your setup, your links and the work we verified. A new profile is public and on the leaderboard; you can change who sees it (only you, signed-in members, or anyone) and leave the leaderboard at any time. Your email, phone number, birth date and Cotton balance are never shown.
• If you link GitHub: your GitHub user ID and username, to credit Cotton for your merged pull requests.
• The Cotton you earn, the cosmetics you get with them, and feedback you send from your account.
• For InstaPay top-ups, we store your checkout email, sending InstaPay address, transaction references and private receipt image. Only you and authorized administrators can access receipts. An administrator separately checks actual bank settlement. Eligible images older than 90 days are removed through owner cleanup; pending payment evidence is protected. Account deletion removes your receipt files and sender identity.
• Stories are private drafts until you consent to publication and a moderator approves them. Published stories show your chosen display name and any LinkedIn post link you supplied. You can withdraw a story or edit it to remove it from the public feed.
• Your browser keeps a sign-in token in local storage until you sign out, so you stay signed in.
• Download all of it, or delete your account, on the account page. Deleting permanently removes sign-in, profile, online wallet, purchase inventory and receipt image files. Resolve pending payments first. Anonymized ledger and settlement references remain for reconciliation.
• Account data is not used for analytics or advertising and is not shared.

7. Your Choice

• Essential analytics apply until you choose.
• Your choice and your light or dark theme setting are stored in this browser’s local storage, which works like a cookie. They apply to this browser only.
• Keep essential only also deletes both random identifiers.
• If your browser sends a Global Privacy Control signal, only essential analytics apply and you are not asked.
• If this notice changes what is collected, you are asked again.

8. Changes

• The date above shows the last update.
• Earlier versions are kept in the Version Archive.