Privacy Policy

What we collect

Account details: your email address, an optional display name if you set one, and an authentication identifier if you sign in with Google or GitHub, including the name and email address those providers share with us. We do not store your password; authentication is handled by our provider, Supabase.

Your content: the designs you create, their names, the generated code, and the images, fonts, and thumbnails attached to them.

Version history: automatic snapshots of your designs (up to 20 per design) so earlier states can be restored.

A simple presence signal: while a design is open in the editor, a timestamp for that design is refreshed about every 15 seconds so the service knows it is currently open. It holds no cursor, keystroke, or content data and is deleted with the project.

Basic technical data needed to run the service, such as request logs and error reports.

A small amount of data kept only in your browser, not sent to us: see "Cookies and local storage" below.

Why we are allowed to process it

Account details, your content, version history, and the presence signal: because we need them to provide the service you signed up for. Without them we cannot authenticate you or store your work.

Technical and error data: because we have a legitimate interest in keeping the service working and secure, which we weigh against your right to privacy each time we add a new kind of logging.

We do not use your data for automated decision making, and nothing about your account or projects is decided by an algorithm without a person able to review it.

Where it lives and who processes it

We use a small number of outside companies to run the service, and we only give each one the data it needs to do its job:

Supabase: your account, authentication, and your project data, protected by row level security so one account cannot read another account's projects.

Google and GitHub: only if you choose to sign in with one of them, to authenticate you.

Resend: your email address, to send account emails such as confirming a new address or resetting a password. We do not send marketing email through this or any other channel today.

Cloudflare: to serve the website and protect it from abuse. Cloudflare sees standard web request data (such as your IP address) as part of delivering the page to you, the same as any host.

Browserless: when you export or preview a design as an image or similar rendered output, the design being rendered (including any image it uses) is loaded in a headless browser run by Browserless, our rendering provider. Access uses a short-lived signed token for that one design. Browserless does not receive your account details.

Supabase also stores your uploaded images and fonts and your project thumbnails. Uploaded images are private to your account. Fonts and thumbnails are served from public storage URLs that are hard to guess but not password protected, so anyone who has the exact link can load that file. Do not upload a font or rely on a thumbnail you need to keep secret.

If we enable an AI-assisted design feature, One Redesign and Anthropic: only if you turn that feature on, and only the design content needed to generate the assistance you asked for. This section will be updated with specifics before that feature is available to your account.

Cloudflare Web Analytics: we use it to measure page views and site performance. It is cookieless, does not track you across other websites, and does not build a personal profile of you. It sees standard request data such as your IP address and browser details, which Cloudflare uses to produce aggregate statistics for us.

We do not sell your personal information, and we do not use your designs to train models.

Data is retained while your account is active. Version history keeps only the most recent 20 snapshots per design, and older ones are removed automatically. If you delete a project, its presence signal and version history are deleted with it. If you delete your account, your account details, projects, and uploaded files (images, fonts, and thumbnails) are removed immediately. Copies in routine backups or logs may persist briefly before they expire. We may keep limited information longer where the law requires it, or where we need it to resolve a dispute, prevent fraud or abuse, or enforce our agreements, and we will delete it once that need ends.

Cookies and local storage

We do not use cookies.

We use your browser's local storage, which is data kept on your device rather than sent to us, for three things: keeping you signed in between visits, remembering colors you have recently used in the editor, and remembering a small number of app preferences such as your last settings. None of this is used for advertising or for tracking you across other websites, and we do not run any advertising scripts on this site. The one measurement tool we use is Cloudflare Web Analytics, described above, which does not use cookies or local storage.

Your choices and your rights

You can export your projects at any time; the generated code is yours.

You can request a copy of the personal data we hold about you, and you can ask us to correct anything that is wrong.

You can delete your account yourself at any time: open the Account page and choose Delete account. Deletion is immediate and removes your account, your projects, and your uploaded files.

Depending on where you live, you may also have the right to restrict or object to how we process your data, to ask us to move your data to another provider, and to withdraw a consent you previously gave us. If you are in the European Economic Area or the UK, you have the right to complain to your local data protection authority. If you are a California resident, you have the rights described under the CCPA, including the right to know what we collect and the right to delete it. We do not sell or share personal information for cross-context advertising, so there is no opt-out needed for that.

This service is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or the minimum age that applies where you live, if higher). If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we make a material change to this policy, we will update the date at the top of this page and, where the change is significant, let you know by email or by a notice in the product before it takes effect.

Contact

We are a new product. We do not have a published support address yet; when we do, it will appear on this page and on our contact page.