Privacy Policy
Last updated 5 November 2026
What we collect, why we collect it, and what you can do about it, in plain English.
Who we are
Website, thanks. is run by Spice Of Life Media (ABN 19 624 756 890), based in South Australia. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
What we collect
- Account details: your email address, and your name if you sign in with Google.
- Your website: the description you type, the words, photos and business details you add, and saved versions.
- Messages: enquiries visitors send through your site's contact form, including their name, email and message.
- Billing: your plan and payment status. Card details are handled by Stripe and never reach us.
- Technical data: sign-in cookies, and short-lived, scrambled (hashed) records of IP addresses and emails used to stop spam and abuse.
How we use it
To create, save, host and publish your website, sign you in, deliver contact-form messages to you, send sign-in and service emails, handle billing, prevent abuse, and answer your questions. We don't sell your personal information or use it for advertising.
Services that help us run it
We share only what each service needs to do its job:
- Vercel: hosting and photo storage.
- Cloudflare: photo storage.
- Neon: our database, hosted in Sydney.
- OpenAI: writing your first draft and Magic Fix suggestions from the text you give us.
- Resend: sending emails.
- Stripe: payments.
- Crisp: our live chat. It keeps your chat messages and, if you're signed in, your name, email and website details, so we know who we're talking to.
- Openprovider: registering domain names you buy from us. Domain registries require the owner's name and contact details.
- Migadu: business email inboxes you buy from us, including the emails stored in them.
- Google: sign-in, if you choose it. We receive only your name, email address and a Google account ID.
- Google Analytics and Google Tag Manager: counting visits to our own public pages, without analytics cookies.
Some of these services store or process data in the United States and other countries. We choose providers with strong security and privacy commitments.
Cookies and your browser
We use essential cookies to keep you signed in and protect sign-in from tampering. Your browser also keeps a copy of drafts you're editing so you don't lose changes. We don't use advertising or tracking cookies. Google Analytics and Google Tag Manager count visits to our own public pages (such as the home, pricing and help pages) without setting analytics cookies. They never run on the editor or on the websites you publish.
Published websites
Anything you publish is public, and anyone can view it. You're responsible for having permission to publish the words, photos and personal details on your site, and for how you handle enquiries you receive.
How long we keep it
We keep your account and websites while your account is open. Sign-in links expire after 15 minutes, and anti-abuse records are cleared within days. If you close your account, we delete your account and websites. We may keep billing records for as long as tax law requires.
Your choices
You can ask to see, correct or delete your personal information at any time through the Help page or by emailing info@websitethanks.com. If you're unhappy with how we've handled your information, tell us and we'll respond within 30 days. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we make important changes to this policy, we'll update this page and let account holders know by email.