Last updated: July 30, 2026

Privacy Policy

This Privacy Policy describes how personal information is collected, used, and shared when you use WidgetStar, both as an account holder and as a visitor to a website where a WidgetStar widget is embedded. Our Terms of Service are available separately.

By registering for, or using WidgetStar, you agree to the Terms of Service and Privacy Policy. If you do not agree, please do not use the Service.

For the purposes of applicable data protection law, Kicya LLC is the controller of the account and billing data described below. For data collected from visitors through the widgets, Kicya LLC processes that data on behalf of the site owner who embedded the widget, and the site owner is responsible for informing visitors and having a legal basis for that processing.

Information We Collect

From account holders (site owners), we collect:

  • The email address you provide when registering for an account.
  • Billing-related information necessary to process payments, handled by our payment provider (see Third-Party Services below).
  • Technical information such as IP address and browser information, used to operate the Service and prevent abuse.

From visitors to sites where a widget is embedded, the widgets may collect:

  • IP address and browser or device information.
  • Content submitted through interactive widgets, such as chat messages, comments, reactions, and contact-form submissions.
  • Aggregate, non-identifying counts used for features such as unique-visitor and hit counting.

How Information Is Used

We use collected information to:

  • Operate and maintain the Service and its widgets.
  • Enable widget features chosen by the site owner, such as displaying messages, reactions, and visitor counts, and delivering contact-form submissions to the site owner.
  • Prevent abuse, spam, and malicious activity, including through bot-protection challenges.
  • Respond to support requests.
  • Comply with legal obligations.

We do not sell your personal data.

Legal Basis for Processing

Where the GDPR or similar laws apply, we process your personal data on the following bases: to perform our contract with you and provide the Service; for our legitimate interests in operating, securing, and improving the Service and preventing abuse; to comply with our legal obligations; and, where required, on the basis of your consent, which you may withdraw at any time.

Third-Party Services

We rely on a limited number of third-party services to operate the platform:

  • Stripe, for payment processing. Stripe processes billing information in accordance with its own terms and policies at https://stripe.com/legal.
  • Cloudflare Turnstile, for bot protection and abuse prevention on interactive widgets. Please review the Turnstile Privacy Addendum for more information.

These services process only the information necessary to provide their function.

Cookies and Similar Technologies

WidgetStar uses cookies and similar technologies that are necessary to provide the Service, such as keeping you signed in to your account. Widgets may set functional cookies where required for features you have enabled. If you are a site owner, you are responsible for disclosing the widgets' use of cookies to your visitors and obtaining consent where the law requires it.

Data Retention

We retain information only for as long as necessary to operate the Service, comply with legal obligations, resolve disputes, and enforce our policies. Content associated with your widgets is retained while your account and the relevant widget are active, and may be deleted after account or widget deletion.

Your Rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to request its deletion, to restrict or object to its processing, to receive a copy in a portable format, and to withdraw any consent you have given. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us using the contact form or [email protected]. You may delete your account at any time from the account page.

International Transfers

Your data is stored on servers located in Finland. Some of our third-party providers, such as our payment processor, may process limited data outside the European Economic Area. Where that occurs, we rely on appropriate safeguards, such as standard contractual clauses, to protect your data.

Security

We take reasonable measures to protect the information we hold, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

The Service is not directed to children under the age of 13, or the applicable minimum age of digital consent where higher, and such children may not register for an account.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and will take effect immediately.

Contact

If you have any questions about this Privacy Policy, please contact us using the contact form.