Website Privacy Notice

Effective July 23, 2026. This Website Privacy Notice explains what personal information we collect from adults who use lillory.com (the "Website") and how we use it. It is operated by Lillory LLC, a Minnesota limited liability company ("we," "us"). It covers the Website only. The Lillory application at beta.lillory.com, which children use, is covered by the separate Lillory Privacy Policy, which is stricter and controls for that product. The Website is for adults; we do not knowingly collect personal information from children through it.

What we collect. We collect only what you give us and a minimal amount of technical data needed to run the Website securely. From the pilot request form: your name, email address, the role you choose, an optional count of readers you work with, and, only if you provide it and check the opt-in, a mobile number and your SMS consent. From the community forum: the name or initials and role you choose to attach to a post, and the text of your question or reply. From a resource request: your email address, to send the resource. Automatically, for security and abuse-prevention only: your IP address, browser type, and request timestamps in short-lived server logs, and a hidden anti-spam field. We do NOT use cookies, advertising, third-party analytics, session trackers, fingerprinting, or any microphone, camera, or location data on the Website.

Why we use it. We use your information solely to: respond to and manage your pilot request; send you a confirmation and pilot updates; operate and moderate the community forum and publish approved posts; deliver a resource you asked for; keep the Website secure and free of spam and abuse; and comply with law. We do not use your information for advertising or profiling.

We do not sell or share your personal information. We have never sold personal information and do not share it for cross-context behavioral advertising. We are not in the business of your data.

Who processes data for us. We use a small set of service providers that process data only to provide their service to us, under their own terms: Cloudflare (website hosting, the leads and forum database, and email routing), Resend (sending transactional and notification email), and, only if you opt in to texts, Twilio (sending SMS). We may disclose information if required by law, to protect our or others' rights and safety, or in connection with a business transfer, in which case this Notice will continue to apply or you will be notified.

The forum is public. Anything you submit that we approve and publish in the community forum is public and may be indexed by search engines. Share only what you are comfortable making public, use initials or a first name if you prefer, and never post a child's name or personal information or anyone else's private details.

Text messages. We store your mobile number only if you check the SMS opt-in, and we use it only to text you about the pilot. Message and data rates may apply; reply STOP to opt out at any time and HELP for help. Opting out of texts does not remove you from the pilot request.

Email. Any pilot or update emails we send include a way to unsubscribe, and we honor opt-outs promptly. A postal mailing address is available on request from gabe@lillory.com.

Retention. We keep pilot requests and their contact details only as long as needed to run the pilot and our relationship with you, and we delete them on request. Community submissions that are declined are kept briefly for spam review, then deleted; approved posts remain public until you ask us to remove them or we remove them. Security logs are short-lived. When information is no longer needed, we delete or de-identify it.

Your choices and rights. You may ask us to access, correct, or delete the personal information we hold about you, to remove a forum post you submitted, to unsubscribe from email, or to stop texts. To exercise any of these, email gabe@lillory.com from the address you used, and we will respond within a reasonable time and as required by law. We will not discriminate against you for exercising a right.

US state privacy rights. Depending on your state (for example, under the California Consumer Privacy Act as amended by the CPRA, and comparable laws in other states), you may have the right to know what personal information we collect and how we use it, to access or receive a copy of it, to correct or delete it, and to opt out of sale or sharing and of targeted advertising. We do not sell or share personal information or run targeted advertising, so there is nothing to opt out of, but you may still exercise the other rights above by emailing us. You may use an authorized agent where the law allows; we may verify your request.

Children. The Website is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18 through the Website, and the pilot form is built with no field for a child's name, age, or grade, plus an automated check that blocks child-scoped fields. If you believe a child provided information through the Website, contact us and we will delete it. A child's first name is set up only inside the Lillory app after an adult signs in, under the app's own COPPA-compliant Privacy Policy.

Security. We use reasonable administrative and technical safeguards, including encryption in transit, a strict content-security policy, and access controls. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you as required if a breach affects it.

Where we operate. The Website is operated from the United States and intended for users in the United States. If you access it from elsewhere, you do so on your own initiative and are responsible for local law.

Changes and contact. We may update this Notice; the current version is always posted here with its effective date. Questions or requests: Lillory LLC, attention Gabriel Michalski, at gabe@lillory.com.