Privacy at Capsule

Product privacy information · 8 September 2026

Contact hello@headpills.com about your account, website data, access requests or deletion.

Client accounts

We store your verified email, account details, session records, sites, invoices, requests, approved releases and administrative audit records to provide the service. Capsule uses a session cookie for sign-in. Google sign-in is optional; email verification is also available. Administrators can access client accounts for support and hosting operations.

Website analytics

The Capsule analytics script does not set analytics cookies or local-storage identifiers. The service receives page paths, referrer information, coarse country data, device/browser information, events and available performance measurements. It uses the connection IP address and user agent to create a salted, site-specific daily visitor identifier; raw IP addresses are not stored in the analytics tables. Daily identifiers do not provide a persistent cross-site profile.

Raw analytics events are retained for up to 400 days. Daily aggregate summaries remain available for the service history. This description applies to Capsule’s measurement only: other scripts, forms and services on a website may have different requirements. Website owners are responsible for informing their visitors about the services they use.

Enquiries and operational messages

Connected forms store the information visitors submit, such as name, email, phone and message. Enquiries are visible to the account and HeadPills staff. Operational notifications are delivered by email. Optional account integrations can forward enquiries to recipients or a CRM configured for that account. Form submissions remain in the account until they are removed or a deletion request is handled.

Service providers

Cloudflare provides hosting, network services and database infrastructure. Resend delivers operational email. Google provides optional sign-in and, when authorized, Search Console access. Processing locations and provider policies depend on these services. Failed operational emails are queued for retry; successful queue payloads are cleared. Financial and audit records may need to be retained after service ends.

Requests about data

Contact HeadPills from your verified account email to request a copy, correction or removal of account data. For an enquiry submitted to a client website, contact that website’s operator; HeadPills can help the operator locate and manage it.