Privacy
updated
Short version: we store your email so you can sign in, and the page you build. We run no analytics, set no advertising cookies, and sell nothing to anyone.
What we store
Your email address — the only way to sign in. There are no passwords.
Your page — name, bio, tiles, theme, uploaded images. All of it is public by design; that's what the page is for.
Connected account handles — the usernames you add (YouTube channel, Twitch login…) so we know which webhook belongs to which page.
Sign-in and session tokens — stored as SHA-256 hashes, never in plain text. If the database leaked, nobody could sign in as you with it.
Delivery IDs — a short-lived list of webhook identifiers used to ignore duplicates. Deleted after 7 days.
What we don't store
No analytics, no visitor tracking, no fingerprinting, no advertising cookies. The only cookie is your session cookie.
We don't store passwords, payment details or ID documents. Payments never pass through us — earning links point at your own Ko-fi, Polar, Gumroad or Patreon account.
We don't pull data from Instagram, TikTok, X or Threads.
Who else sees it
Cloudflare — hosting, database and file storage. Everything runs on their infrastructure.
Resend — sends the sign-in email. It receives only your email address.
The platforms you connect — we call their public endpoints (YouTube, Twitch, GitHub, Spotify, Bluesky, Mastodon) to fetch what you asked for. We send them your public handle, nothing else.
unavatar.io — resolves the profile picture of a static social tile, when you add one.
That's the whole list. No data broker, no ad network, no third-party analytics.
Deleting your data
There's a delete button in your editor. It removes your page, your uploaded images, your subscriptions, your sessions and your account row — permanently, with no undo.
Live subscriptions expire by themselves: their leases are short and renewal only runs for rows that still exist.
Cached copies at the edge and any published page previews may survive for a short while, and search engines keep their own index on their own schedule.
Logs
Our servers keep short-lived operational logs (request errors, webhook activity) on Cloudflare's infrastructure. We don't build user profiles from them.
Contact
This is a small, independent product built in public. For any privacy question, reach the address in the footer of the repository.