What we do with your information

When you submit the form we ask for, and keep, exactly these fields:

• First name, to address you in the reply.
• Email address, so we can send the assessment back.
• Phone number, optional, only if you choose to share it.
• Your family story (free text): names, places, approximate dates of your ancestor.

Alongside the submission, we store technical context to detect spam and understand which channels bring real people:

• Marketing attribution: UTM parameters and Google Ads click ID (gclid), if present.
• Referrer, the page that linked you here, if your browser sends it.
• Browser user-agent, the standard string browsers report.
• Hashed IP: a one-way SHA-256 hash truncated to 16 characters; we cannot recover the original address.

We do not ask for, and do not store, payment information or government documents at this stage.

• To read your case and email you a written assessment.
• To improve our copy and pages (which keywords brought you here, did the page load).
• To detect spam and automated submissions.

We do not sell your data, and we do not use it for ad retargeting.

We use a small number of third-party services to operate Daina Citizenship. Each only sees the data it needs:

• Render hosts the website; sees server logs for security and operations.
• Supabase stores submissions in an encrypted Postgres database.
• Resend sends the assessment email back to you, only if you submitted the form.
• Google Analytics & Google Ads see anonymized page-view and click data to measure traffic and campaign performance.

If you are in the EU, EEA, or UK, the GDPR gives you the right to access, correct, delete, and port your data, and to object to certain processing. Residents of California and similar US-state regimes have parallel rights.

To exercise any of these, email us or simply reply to any Daina Citizenship message you have received. We respond within 30 days.

For privacy questions, deletion requests, or anything else about your data:
hello@dainacitizenship.com