Privacy Policy

Overview

Lismah collects only the information needed to operate the website, receive project requests, provide the tools available on the website, and, where a visitor chooses to allow it, understand how public pages are being used.

Optional visitor analytics are not recorded unless the visitor accepts optional analytics through the cookie preference system.

Information You Provide

When you submit a software project request, Lismah may collect information that you provide through the request form, including:

• your name;
• your email address;
• your business or brand name, if provided;
• the type of service requested; and
• the project details you submit.

This information is used to receive, record, and respond to your project request.

Idea Registry Information

The Lismah Idea Registry allows information to be entered and stored in the Lismah database.

This may include:

• an idea title;
• description;
• category;
• status;
• notes; and
• version goals from V1 through V5.

Do not place passwords, banking credentials, government identification numbers, medical information, or other highly sensitive personal information into the Idea Registry.

Essential Session Cookie

Lismah uses an essential session cookie so the website can maintain a temporary browser session.

The session may contain:

• a randomly generated Lismah session reference;
• the time the session was created; and
• your optional-cookie preference.

The session cookie does not intentionally contain your name, email address, project request contents, Idea Registry contents, or passwords.

The essential session cookie is required for session and cookie-preference functionality and remains active even when optional analytics are rejected.

Optional Analytics

Lismah may record limited visitor analytics only after you accept optional analytics.

An analytics event may contain:

• the Lismah session reference;
• the date and time of the request;
• the page or route requested;
• the HTTP request method;
• the Internet Protocol address associated with the request;
• the referring page, when supplied by the browser;
• the browser User-Agent string;
• browser or platform information when it can be derived from the request; and
• coarse country, region, or city information only when trusted production infrastructure supplies those values and that feature is enabled.

Lismah does not request precise GPS or browser geolocation for visitor analytics.

Analytics Consent

Optional analytics are disabled until you choose to accept them.

If you reject optional analytics, Lismah does not intentionally create visitor analytics records for your public-page visits.

The essential session cookie remains active because it supports website operation and stores your cookie preference.

Pages Excluded From Visitor Analytics

Lismah currently excludes certain technical requests from visitor analytics, including:

• the health-check endpoint;
• static files such as stylesheets, scripts, and images; and
• the cookie-consent API itself.

Analytics Retention

Visitor analytics records are retained for up to 90 days.

Analytics records older than the configured retention period are automatically removed from the Lismah database when the application starts.

This retention rule applies only to visitor analytics stored in the visitor_events data set.

It does not automatically delete project requests or Idea Registry records.

Email Notifications

Lismah may use email to notify Lismah about a new project request and to send a confirmation to the person who submitted the request.

Email functionality may be disabled depending on the current website configuration.

A project request is stored independently of email delivery. Failure of an email notification does not delete a successfully stored request.

Storage

Project requests, Idea Registry records, and consent-controlled visitor analytics are stored in Lismah's application database.

Application logs may also contain operational information needed to maintain and troubleshoot the website.

General Retention

Lismah intends to retain personal information only for as long as it is reasonably required for the purpose for which it was collected, for legitimate operational or security needs, or where retention is otherwise required.

Visitor analytics have the specific 90-day retention rule described above.

Other information, such as project requests and Idea Registry records, is retained according to its operational purpose and is not currently subject to the visitor-analytics cleanup process.

Security

Lismah uses technical and operational measures intended to reduce unauthorized access to stored information.

These measures include signed session cookies, restricted production configuration, server-side storage, controlled deployment, and separation of production secrets from source-controlled files.

No Internet-connected system can be guaranteed to be completely secure.

Third-Party Services

Lismah V2 does not currently send visitor IP addresses to an external IP-geolocation service.

If a third-party analytics, hosting, content delivery, geolocation, email, or similar service is introduced later, this policy should be updated to describe the relevant collection, use, and disclosure before that service is enabled.

Your Choices

You may reject optional analytics while continuing to use the public website and its essential functionality.

You may also request information about personal information Lismah holds about you, or request correction or deletion where appropriate and legally permitted.

Changes to This Policy

This privacy policy may be updated when Lismah's services, data practices, or legal obligations change.

The update date shown near the top of this page should be changed whenever material revisions are made.

Contact

Privacy questions or requests can be submitted through the contact options provided on Lismah.