Legal

Privacy Policy

Last updated: August 23, 2026

This Privacy Policy explains how Wolfigs (“Wolfigs”, “we”, “us”) collects, uses, and protects information across its products and websites, including Weblay, our visual in-place website editor. It applies to wolfigs.com and the Weblay dashboard, editor connector, and API.

Information we collect

Account information. When you create an account we store your email address, a securely hashed password, your display name, and account security settings (active sessions, two-factor authentication status, and hashed recovery codes).

Content you create. The edits you make to your sites (text, styles, and structural changes), the pages and sites you register, and images you upload to replace media on your pages. Uploaded media is stored privately in Google Cloud Storage and served only through Weblay.

Operational data. To keep edits working as your site changes, Weblay records element descriptors and drift-detection results, and receives anonymous runtime signals from the on-site connector (for example, whether an edit still resolves to its element).

Cookies. We use strictly necessary cookies to keep you signed in to the dashboard and to protect requests against cross-site request forgery. We do not use advertising or third-party tracking cookies.

How we use information

We use your information to provide and secure the service: to authenticate you, store and publish your edits, serve your uploaded media, detect and help you recover from selector drift, and to send transactional email.

Transactional email. We send account email such as address-verification and password-reset messages. These are delivered from a Wolfigs-operated mailbox over an authenticated connection; we do not use your email address for marketing without your consent, and we do not sell it.

How information is shared

We do not sell personal information. We share data only with infrastructure providers that process it on our behalf under their own security and privacy commitments, including Google Cloud Platform (object storage for uploaded media and email delivery) and our database hosting provider. These providers process data solely to operate the service. We may disclose information if required by law.

Weblay’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention

We retain account and content data for as long as your account is active. When you delete a site, its pages, edits, and uploaded media are removed. When you close your account, we delete or anonymize your personal data except where we must retain it to comply with legal obligations.

Security

Passwords and recovery codes are stored hashed, uploads are sanitized and served under a restrictive content-security policy, connections are encrypted in transit, and access to production data is limited. Two-factor authentication is available on every account.

Your rights

You may access, correct, export, or delete your personal data. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these, contact us at the address below.

Children

Weblay is not directed to children under 16, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, by notice within the product.

Contact

Questions about this policy or your data can be sent to privacy@wolfigs.com.