Privacy Policy
Last updated: 4 August 2026
Draft. This document describes how the product actually works, but it has not been reviewed by a lawyer. It needs review before real signups depend on it.
What we collect
Account details: your email address, an optional display name if you set one, and an authentication identifier if you sign in with Google or GitHub, including the name and email address those providers share with us. We do not store your password; authentication is handled by our provider, Supabase.
Your content: the designs you create, their names, and the generated code associated with them.
Basic technical data needed to run the service, such as request logs and error reports.
A small amount of data kept only in your browser, not sent to us: see "Cookies and local storage" below.
Why we are allowed to process it
Account details and your content: because we need them to provide the service you signed up for. Without them we cannot authenticate you or store your work.
Technical and error data: because we have a legitimate interest in keeping the service working and secure, which we weigh against your right to privacy each time we add a new kind of logging.
We do not use your data for automated decision making, and nothing about your account or projects is decided by an algorithm without a person able to review it.
Where it lives and who processes it
We use a small number of outside companies to run the service, and we only give each one the data it needs to do its job:
Supabase: your account, authentication, and your project data, protected by row level security so one account cannot read another account's projects.
Google and GitHub: only if you choose to sign in with one of them, to authenticate you.
Resend: your email address, to send account emails such as confirming a new address or resetting a password. We do not send marketing email through this or any other channel today.
Cloudflare: to serve the website and protect it from abuse. Cloudflare sees standard web request data (such as your IP address) as part of delivering the page to you, the same as any host.
If we enable an AI-assisted design feature, One Redesign and Anthropic: only if you turn that feature on, and only the design content needed to generate the assistance you asked for. This section will be updated with specifics before that feature is available to your account.
We do not sell your personal information, and we do not use your designs to train models.
Data is retained while your account is active. If you delete your account, we delete your account details and project data within 30 days, except where we need to keep something longer to meet a legal obligation, resolve a dispute, or enforce our agreements.
Cookies and local storage
We do not use cookies.
We use your browser's local storage, which is data kept on your device rather than sent to us, for three things: keeping you signed in between visits, remembering colors you have recently used in the editor, and remembering a small number of app preferences such as your last settings. None of this is used for advertising or for tracking you across other websites, and we do not run any analytics or advertising scripts on this site.
Your choices and your rights
You can export your projects at any time; the generated code is yours.
You can request a copy of the personal data we hold about you, and you can ask us to correct anything that is wrong.
You can request deletion of your account and its associated projects by emailing [email protected]. We aim to complete deletion within 30 days of a verified request.
Depending on where you live, you may also have the right to restrict or object to how we process your data, to ask us to move your data to another provider, and to withdraw a consent you previously gave us. If you are in the European Economic Area or the UK, you have the right to complain to your local data protection authority. If you are a California resident, you have the rights described under the CCPA, including the right to know what we collect and the right to delete it. We do not sell or share personal information for cross-context advertising, so there is no opt-out needed for that.
This service is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or the minimum age that applies where you live, if higher). If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we make a material change to this policy, we will update the date at the top of this page and, where the change is significant, let you know by email or by a notice in the product before it takes effect.
Contact
We are a new product and do not have a published support address yet. When we do, it will appear here and on our contact page.