Privacy Policy
We collect as little as possible, and you stay in control.
Last updated 2026-10-17
What we collect
- Account data: your username, email address, and a securely hashed password (we never store passwords in plain text).
- Profile data: the display name, bio, links, widgets and appearance settings you choose to publish.
- Content: files you upload to your media library, pastes you create, and templates you save.
- Analytics: aggregated, privacy-respecting view and click data (see below).
- Technical data: IP address and user agent for security, rate limiting and audit purposes.
Analytics are privacy-first
Profile analytics are derived from real events but stored in aggregate. Visitor identifiers are hashed, and bot traffic is filtered out. We do not sell analytics data or use it to build advertising profiles.
How we use your data
To operate your account and profile, provide the features you request, keep the platform secure, enforce our terms, and process payments for the optional premium features.
Cookies
We use a single httpOnly session cookie to keep you signed in. We do not use third-party advertising cookies.
Your controls
You can export your data and delete your account at any time from your dashboard. Deleting your account removes your profile, media, pastes and personal data, subject to legal retention requirements.
Security
Passwords are hashed with scrypt. Sessions are stored as hashes. We enforce rate limiting, validate uploads, and audit privileged actions.
Contact
For privacy questions, visit the support page.