Privacy Notice

How Illegal Is It? (the "Service") is operated by Jonathan Feldman, a sole proprietor ("we", "us"). For the purposes of data protection law, Jonathan Feldman is the data controller for personal data processed via the Service.

We do not knowingly collect special categories of personal data. Please don't submit sensitive personal information in your inputs.

• Service providers / subprocessors — hosting, database, analytics, error monitoring, and AI model providers used to operate the Service.
• Stripe Payments Europe, Ltd. — our payment processor. Stripe processes payments, manages refunds and chargebacks, and handles tax calculation, collection, and remittance where applicable.
• Professional advisers — legal and accounting advisers, where necessary.
• Authorities — where required by law, court order, or to protect rights, property, or safety.

We do not sell your personal data.

Our service providers may process data outside your country of residence, including in the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

We retain personal data only as long as needed for the purposes described above, to comply with legal obligations (e.g. tax and accounting records), to resolve disputes, and to enforce our agreements. When no longer needed, data is deleted or anonymised.

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion ("right to erasure").
• Restrict or object to certain processing.
• Request portability of data you provided.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us via the support channel on this site. We aim to respond within one month.

We use appropriate technical and organisational measures — including encryption in transit, access controls, and reputable infrastructure providers — to protect personal data. No system is perfectly secure; we will notify affected users of any material breach in line with applicable law.

We use essential cookies and similar technologies for authentication, session management, and security. We may use limited analytics cookies to understand usage patterns. You can manage cookies via your browser settings; disabling essential cookies may break parts of the Service.

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children.

We may update this notice from time to time. Material changes will be highlighted on this page.

Data controller: Jonathan Feldman (sole proprietor). For privacy questions, email support@howillegalisit.com. For purchase-related data handled by our payment processor, see Stripe's privacy notice.