Policy

Privacy Policy

Last updated

LetterForgeUSA at usalegalletter.site is operated by Naveed Qadir. For privacy questions or requests, email usalegalletter@gmail.com or use the contact page. Please do not include a completed letter, identification document, medical record or other sensitive material in a support message.

This policy describes the production site’s data handling. Advertising is disabled in this release. This release uses optional Google Analytics 4: its tag runs only after you accept analytics. Neither service receives the contents of the letter or signature editor through our tools.

1. Letter details stay in your browser

The letter generators process names, addresses, dates, amounts and draft text locally in an isolated browser frame. They do not upload those inputs or generated documents to LetterForgeUSA. There is no account, online document storage or recovery service.

  • Letter contents are held in memory while you work. Resetting or leaving the editor can discard your draft.
  • The tools do not put letter inputs in page addresses, analytics events, server logs or browser storage.
  • The editor loads no advertising, analytics or session replay scripts. Its security policy blocks outgoing connections and form submissions.
  • PDF, Word and text downloads are created on your device. We do not receive a copy.
  • We do not request Social Security numbers, payment-card details, bank account numbers or medical records.

Downloads, clipboard contents, browser print queues and files you later email are outside the editor’s memory. Your device, browser extensions, backup settings and chosen sharing services can retain copies. Review those settings, especially on a shared computer.

2. PDFs and signatures in the eSign tool

The eSign tool reads the PDF or signature image you choose into browser memory. The PDF contents, file name, signature drawing, typed signature and text placements are not uploaded to our server. Signing and PNG/PDF export happen locally.

Clearing the tool or leaving it does not delete files already downloaded to your device. We cannot recover a lost PDF or signature. Do not use the tool to open documents on a device you do not trust.

3. Hosting and security

The production site uses Hostinger hosting. Delivering a page requires the hosting service to process ordinary request information such as an IP address, requested page or asset, request time and browser information. Referrer information depends on browser behavior and the site’s referrer policy. Hosting and security logs are separate from the information entered into a letter.

These services support page delivery, troubleshooting and protection against abusive traffic. Their retention and processing depend on the hosting service and account settings. We do not promise that hosting is anonymous or that providers never retain technical logs. See Hostinger’s privacy policy for information about its practices.

4. Optional Google Analytics

Google Analytics 4 is configured for the production site, with enhanced measurement disabled. No Google analytics script loads before analytics consent. Choosing “Accept all,” or enabling Analytics in preferences, allows it to load. Declining analytics does not prevent you from drafting, signing or downloading a document.

Analytics can receive information about public-page visits, browser/device characteristics and interactions. Google may use first-party cookies and identifiers when consent is granted. Network requests also expose technical information to the service; “no letter contents” does not mean that analytics collects no personal data of any kind.

Our custom event allowlist contains:

Event What it records
tool_view A public tool page was opened
tool_start A generator was started
step_complete A form step was completed
preview_view The draft preview was opened
document_download A letter download or print action was used
copy_letter The copy-text control was used
source_open An official source link was opened
validation_error A fixed category of input error occurred
unsupported_jurisdiction A tool reported unsupported coverage
esign_download A signed PDF or signature PNG was downloaded

Allowed custom parameters are limited to a fixed tool identifier, step number, output format, template version, fixed error code and, where used, a coarse state code. The eSign download event contains only the tool identifier and PDF/PNG format. It contains no file name, signature or document content.

We do not send names, email addresses, postal addresses, ZIP codes, amounts, user-entered dates, free text or health information as analytics parameters. Accommodation flows are excluded from analytics. The site’s analytics configuration disables Google Signals and advertising personalization signals.

While a consent decision is pending, up to 20 allowed interaction events can wait in browser memory. They are sent only if analytics is accepted; declining discards them. A page view and these events describe different actions, and collection may be reduced by consent choices or browser blockers.

Read how Google uses information from sites that use its services and Google’s privacy policy.

5. Advertising is currently off

This release does not load advertising tags or request ads. An Advertising preference does not by itself activate an unconfigured service.

If advertising is introduced, this policy will be updated to identify the active services and relevant data use. Google and other advertising vendors can use cookies, web beacons, IP addresses or similar identifiers to deliver and measure ads and prevent abuse. Personalized advertising can use visits across participating websites. Google’s advertising controls explain the choices available through Google.

Our own preferences banner is not a Google-certified consent management platform. Advertising must remain disabled until the necessary account approval, disclosures, placement checks and consent configuration are in place. Google describes its applicable certified-platform requirements in its consent management guidance.

6. Privacy preferences and local storage

Use Privacy preferences in the footer to accept or reject optional services and change your choices. The consent decision is saved in your browser under lf-consent-v1, with a decision time and expiry. It expires after 365 days. This preference record contains no letter inputs.

Global Privacy Control keeps advertising consent denied while the signal is present. Analytics remains a separate choice. The tools work when you reject non-essential services.

Withdrawing consent updates the site’s consent state and stops forwarding new custom analytics events. A third-party script already loaded may remain in memory until reload. Save your work before reloading, then use your browser’s site-data controls if you also want to remove existing cookies or local preference records. Withdrawal does not erase information already processed by a provider.

A local lf-internal flag may be set on the owner’s testing browser to identify internal analytics traffic. It is not needed to use the public tools and does not contain document data.

7. Contact email

The contact page opens your email application; it does not upload your draft through a website form. If you send a message, we receive the email address, message and attachments you choose to send, together with normal email metadata. Google processes the site’s Gmail mailbox, and your own email provider also handles the message.

Messages are used to answer questions, investigate bugs and keep necessary correction records. They are not used to build advertising audiences. Do not send confidential legal facts or ask us to store your letter. Naveed Qadir reads the mailbox; contacting the site does not create an attorney-client relationship.

8. Retention, providers and your requests

  • Letters, selected PDFs and signatures: not retained by LetterForgeUSA; local copies are under your control.
  • Consent preferences: retained in your browser until expiry, a replacement choice or deletion through browser settings.
  • Hosting records: subject to the provider’s service settings and operational retention.
  • Analytics data: subject to the configured Google Analytics retention controls and Google’s processing. Cookie retention and aggregate reports may differ from event-data retention.
  • Contact email: retained as needed to answer the request, investigate the issue and keep necessary records; deletion requests can be sent to the contact address above.

Service providers may process information in countries outside your own. We do not sell letter contents or provide them to advertisers. If privacy law applies to your information, you may have rights to access, correct, delete or restrict processing, object, withdraw consent, or complain to an appropriate authority. The rights available depend on your location and the processing involved.

Send a request to usalegalletter@gmail.com, describing the relevant interaction without attaching sensitive documents. We may need limited information to verify and locate a request. Because the editors do not send us your documents, we cannot search for or delete a server copy that we never received.

The site is intended for people handling rental documents and is not directed to children under 13. If you believe a child has sent personal information to our contact mailbox, tell us so we can review and remove it where appropriate.

Official sources and other external websites have their own privacy practices. Opening one takes you outside LetterForgeUSA. A source-click event, when analytics is accepted, does not include letter contents.

10. Changes and corrections

The updated date at the top identifies this version. We revise the policy when the site’s data handling changes. If the behavior you observe differs from this description, report the page address and issue through the contact page, leaving out personal letter details.