Privacy Policy

Introduction

Welcome to Quotosaurus ("Site", "we," "us," or "our"). Quotosaurus is owned and operated by Quotosaurus LLC ("Company"). This privacy policy explains how we collect, use, and protect your personal information when you use our website at quotosaurus.com.

By using our Site, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our Site.

Information We Collect

Personal Information

Quotosaurus LLC collects the following personal information when you create an account:

• Username
• Email address
• Password (stored in encrypted form)
• Your favorite quotes selections

Automatically Collected Information

We automatically collect certain information when you visit our site:

• IP address
• Browser type and version
• Operating system
• Date and time of access
• Pages visited
• CSRF tokens for security purposes

Cookies

Our site uses only essential cookies necessary for secure operation:

• Session cookies for maintaining your login status
• CSRF tokens to prevent cross-site request forgery
• Django session management cookies

These cookies are strictly necessary for the operation of our site. You cannot opt out of these cookies as they are essential for security and basic functionality.

How We Use Your Information

Quotosaurus LLC uses your personal information solely to:

• Create and manage your account
• Store and manage your favorite quotes
• Communicate with you about your account or changes to our services
• Ensure the security and proper operation of our site
• Send important notifications about privacy policy or terms of service changes

Data Storage and Security

Your information is stored securely on Amazon Web Services (AWS) infrastructure:

• All data is encrypted in transit using SSL/TLS encryption
• Database information is stored in AWS Aurora for PostgreSQL with encryption at rest
• Passwords are hashed using Django's secure password hashing system
• Our application is hosted on AWS Elastic Beanstalk with appropriate security measures
• Regular security updates and patches are applied to all system components

Third-Party Service Providers

We use the following third-party service providers:

• Amazon Web Services (AWS) for hosting and database services
• SendGrid for sending account-related emails

These providers are bound by confidentiality agreements and are not permitted to use your personal data for any other purpose.

Data Retention

Quotosaurus LLC retains your personal information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes.

Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your account and associated data
• Receive a copy of your data
• Object to certain processing of your data

To exercise these rights, please contact us through our contact form.

Changes to Privacy Policy

Quotosaurus LLC reserves the right to update this privacy policy at any time. We will notify you of any changes by:

• Sending an email to the address associated with your account
• Displaying a notification when you log into the application
• Posting the new privacy policy on this page

Changes will take effect immediately upon posting. Your continued use of the Site after we post any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

Children's Privacy

Our service is not intended for users under the age of 13. Quotosaurus LLC does not knowingly collect information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information.

Contact Information

If you have questions about this Privacy Policy or the practices of Quotosaurus LLC, please contact us through our contact form.

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), Quotosaurus LLC processes your personal data based on:

• Performance of the contract we have with you (account management)
• Our legitimate interests (site security and functionality)
• Your consent (where applicable)
• Legal obligations (where applicable)

California Privacy Rights

California residents have certain rights regarding their personal information under the California Consumer Privacy Act (CCPA). Please contact us to exercise these rights.