Privacy

What we collect from you

Your account: email address, password (stored only as an Argon2 hash — we never hold the password itself), and your chosen username.

Your page: the display name, bio, location, category, avatar, links, products, kits, and theme settings you enter. This is content you author, and you can edit or remove any of it at any time.

What we collect from your visitors

When someone views your page or taps one of your links, we record the event so you can see it in your analytics: what was viewed or clicked, when, a coarse device bucket, and a coarse country bucket where our host provides one.

We do not store your visitors’ IP addresses, user-agent strings, cookies, or precise location against those events. This is enforced in the code, not just promised here.

Visitor sessions are identified by a random id kept in the visitor’s own browser storage. It is never joined to an account, never shared with a third party, and clearing browser storage clears it.

Cookies

We set two cookies, both strictly necessary: a short-lived access token and a refresh token, which together keep you signed in. They are HTTP-only, so page scripts cannot read them.

We do not set advertising or cross-site tracking cookies, and we do not run third-party ad networks on creator pages.

Payments

Paid plans are processed by Razorpay. Your card, UPI, or netbanking details are entered in Razorpay’s own checkout and never reach our servers. We store the plan you are on and a record of payments made.

Images you upload

Avatars, product images, and kit covers are stored in object storage (Cloudflare R2) and served from a public URL, because they appear on your public page. Deleting the item removes the reference; treat anything you upload as public.

Your data is yours

Your public page is a public URL you can share or take down at any time by unpublishing it. Data export is available on paid plans and covers links, products, kits, and analytics history.

You can delete your account, which removes your profile and content. Ask us and we will confirm when it is done.

Contacting us

For any privacy question — access, correction, deletion, or export — reach us from the email address on your account and we will respond.