Privacy
updated
Short version: we store your email so you can sign in, the page you build, and a daily count of how many times that page was opened. No advertising cookies, nothing sold to anyone.
What we store
Your email address — the only way to sign in. There are no passwords.
Your page — name, bio, tiles, theme, uploaded images. All of it is public by design; that's what the page is for.
Connected account handles — the usernames you add (YouTube channel, Twitch login…) so we know which webhook belongs to which page.
Sign-in and session tokens — stored as SHA-256 hashes, never in plain text. If the database leaked, nobody could sign in as you with it.
Delivery IDs — a short-lived list of webhook identifiers used to ignore duplicates. Deleted after 7 days.
What we don't store
No tracking script, no fingerprinting, no advertising cookies, no profile of you. The only cookie is your session cookie.
We do count page views — a single number per page per day, so the owner can see their page is being opened. It is counted on our servers: no IP address, user agent or referrer is stored, and nothing is linked to a person. Anyone can be the visitor; the count cannot tell.
We don't store passwords, payment details or ID documents. Payments never pass through us — earning links point at your own Ko-fi, Polar, Gumroad or Patreon account.
We don't pull data from Instagram, TikTok, X or Threads.
Who else sees it
Cloudflare — hosting, database and file storage. Everything runs on their infrastructure.
Resend — sends the sign-in email. It receives only your email address.
The platforms you connect — we call their public endpoints (YouTube, Twitch, GitHub, Spotify, Bluesky, Mastodon) to fetch what you asked for. We send them your public handle, nothing else.
unavatar.io — resolves the profile picture of a static social tile, when you add one.
That's the whole list. No data broker, no ad network, no third-party analytics.
Deleting your data
There's a delete button in your editor. It removes your page, your uploaded images, your subscriptions, your sessions and your account row — permanently, with no undo.
Live subscriptions expire by themselves: their leases are short and renewal only runs for rows that still exist.
Cached copies at the edge and any published page previews may survive for a short while, and search engines keep their own index on their own schedule.
Logs
Our servers keep short-lived operational logs (request errors, webhook activity) on Cloudflare's infrastructure. We don't build user profiles from them.
Contact
This is a small, independent product built in public. Write to ozer@ozersubasi.com — privacy questions included, and a person reads it.