Consent and what we store

Every testimonial from your collection page comes with a record of permission. This page explains what the customer agrees to and what is stored.

What the customer agrees to

Before they can send a testimonial, a customer ticks a box that says: "I agree [your Space name] may show this publicly with my name." The form can't be sent without it.

What we store with a testimonial

• The testimonial text and the star rating, if they gave one.
• Their name, and the optional title, company, website, handle and photo.
• The consent wording they saw and the time they agreed. You can see both in the testimonial's drawer in your inbox.
• Their email, if they entered one. If it is given, we email them a receipt with a private link to remove their testimonial.
• A one-way hash of their IP address. We don't keep the IP address itself. The hash is used to spot repeat submissions, and we keep it for 12 months.

If you edit a testimonial, we keep the original text too. The consent record stays with the testimonial and appears in your export.

Who can see their email

Only you. The email is private. It never appears in widgets, on the proof page, in structured data or in analytics. The form says so next to the field: "Only [Space name] sees this. It's never shown publicly."

What visitors see

Widgets and the proof page show the text, the name, title, company, photo, rating and date, depending on your widget settings. See Choose a widget layout.

Testimonials you import

When you add or import a testimonial yourself, there's no consent record from the author. HappySaid shows "Imported by you. Make sure you have permission to show it." Only import testimonials you have the right to share.

Cookies and tracking

Collection pages, proof pages, widgets and the removal pages set no cookies and use no local storage, so you do not need a cookie banner for HappySaid on your site. Only the dashboard sets an essential sign-in cookie, happysaid_session.

When someone changes their mind

You can delete a testimonial from the inbox at any time. Anyone can also ask to remove a testimonial they gave. You see the request under Removal requests and in the inbox, and you have 14 days to respond. Read Remove a testimonial you gave to see the person's side. This page is a summary, and our privacy policy has the full detail.