What we do with your information

When you submit the eligibility form we ask for, and keep, exactly these fields:

• First name — to address you in the reply.
• Email address — so we can send the assessment back.
• Phone number (optional) — only if you choose to give it, so we can follow up on your case by text as well as email.
• Your family story (free-text) — names, places, approximate dates of the Irish-born ancestor.

Alongside the submission, we also store technical context to detect spam and understand which channels bring real people:

• Marketing attribution — UTM parameters and Google Ads click IDs (gclid, gbraid, wbraid), if present and permitted by your consent.
• Referrer — the page that linked you here, if your browser sends it.
• Browser user-agent — the standard string browsers report (no fingerprinting beyond that).
• Hashed IP — a one-way SHA-256 hash truncated to 16 characters; we cannot recover the original address. Used only to flag suspicious patterns.

We do not ask for, and do not store, payment information or government documents at this stage.

Submissions are stored in a Postgres database hosted by Supabase in the European Union (Frankfurt region). Connections are encrypted in transit (TLS) and the database is encrypted at rest by the provider. Direct read or write access from the public internet is blocked at the row level; only our server can insert new rows, using a private service-role key that is never exposed to your browser.

• To read your case and email you a written assessment.
• To improve our copy and pages (which keywords brought you here, did the page load).
• To detect spam and automated submissions.

To measure which ads bring real cases, we may share a hashed (one-way) version of your email or phone with Google Ads for conversion measurement only, never for third-party marketing and never as your text-message opt-in, and only with your advertising consent and never if you have opted out or your browser sends a Global Privacy Control signal. We do not sell your data to advertisers or data brokers, and we do not use it for ad retargeting.

If you leave your phone number on the eligibility form, you agree we may text you about the inquiry you started. We send a one-time welcome message confirming we have your details, plus the occasional case-related follow-up. This is low-volume and transactional, not marketing.

Message and data rates may apply. You can reply STOP at any time to opt out, or HELP for help.

Your phone number and your consent to be texted are never shared or sold. Your mobile opt-in information is not shared with, or sold to, any third party or affiliate for marketing or promotional purposes. It is used only by Erin Citizenship, to follow up on the inquiry you started. The hashed ad measurement and the Ireland case handoff described elsewhere on this page are separate, based on your consent, and never involve your text-message opt-in or any marketing to you. Full detail is in our text message terms.

We use a small number of third-party services to operate Erin Citizenship. Each only sees the data it needs:

• Render — hosts the website; sees server logs (IP, user-agent) for security and operations.
• Supabase — stores submissions (as above).
• Resend — sends the assessment email back to you (sees recipient address and message body) only if you submitted the form.
• Google Analytics 4 & Google Ads — measure traffic and ad performance (see "Cookies & analytics" below). With your advertising consent, this includes Enhanced Conversions, where your email (and phone, if given) is normalized and turned into a one-way SHA-256 hash on our server and sent to Google to match a conversion to an ad click. We never send Google your family story, ancestry, nationality, religion, documents, or any case details.

None of these services have permission to use Erin Citizenship's data for their own marketing.

The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the text message services.

We tailor consent to where you are. In the EU, EEA, UK, and Switzerland we show a cookie banner and load nothing for analytics or advertising until you accept. In the United States we do not interrupt you with a banner; instead the Privacy choices link in the footer lets you turn ad measurement, personalization, and analytics on or off at any time.

We use Google Consent Mode v2 and honor the Global Privacy Control browser signal: when it is on, we treat it as an opt-out of advertising data sharing and do not send click IDs or hashed email or phone to Google Ads. You can withdraw consent at any time from Privacy choices, which turns these signals off and clears the related tracking storage in your browser.

Part of the work, the filing that has to be done on the ground in Ireland, is handled by a qualified specialist there, a service provider engaged to deliver the service you asked us for. If your case moves forward, we share your case details with that specialist for that one purpose, and only after you give us the go-ahead. Until you do, they see at most an anonymized summary of your case, with no name or contact details. They may not use your information for their own purposes, and you can withdraw that permission at any time. This is not marketing and your information is never sold.

The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties. Your mobile phone number and your consent to be texted stay with Erin Citizenship only.

We use Google Analytics 4 and Google Ads tagging to understand which marketing channels bring real visitors. These services set first-party cookies (typical names like _ga, _gid, _gcl_au) and collect:

• Page views and scroll behavior
• Approximate geographic region (country/city level, from IP)
• Device type and browser
• How you arrived (referrer, ad click)

You can opt out via your browser's privacy controls, a tracking blocker, or the official Google Analytics opt-out add-on.

Submissions are kept until you ask us to delete them, or for up to 24 months after our last reply — whichever comes first. After that, the row is removed from the production database. Backups age out within 30 days.

If you are in the EU, EEA, or UK, the GDPR gives you the right to:

• Access the data we hold about you.
• Correct anything that is wrong.
• Have it deleted.
• Receive a copy in a portable format.
• Restrict or object to certain processing.
• Lodge a complaint with your national data-protection authority.

Residents of California (CCPA/CPRA) and similar US-state regimes have parallel rights: to know, delete, correct, and opt out of any "sale" or "sharing" — though, as noted, we do neither.

To exercise any of these rights, email us (see below) or simply reply to any Erin Citizenship message you have received. We respond within 30 days and will not ask for anything beyond what is needed to verify your request.

For privacy questions, deletion requests, or anything else about your data:
hello@erincitizenship.com

Erin Citizenship is a U.S.-based service. This policy will be updated as the service grows; the "as of" date at the top reflects the current version.