Privacy Policy

We collect information you provide directly, including:

• Account information (name, email address, password)
• Content you create, upload, or publish through the Service
• Payment information (processed by our payment provider; we never see card details)
• Communications you send to us

And information the Service records as you use it:

• Your workspaces, projects and their saved versions
• Counts we need to apply your plan's limits: projects, sites published at once, custom domains, people in a workspace, and the total size of your uploads
• Page views and feature usage (aggregated, anonymized)
• Device and browser type
• IP address (for security and abuse prevention)

We use collected information to:

• Provide and improve the Service
• Apply the limits of the plan a workspace is on
• Process payments and manage subscriptions
• Send service-related communications (no marketing without consent)
• Detect and prevent fraud or abuse
• Comply with legal obligations

A site you publish is served to anyone who has its address, by design — that is what publishing is. Anything you put on a page, including an email address or a phone number in your own content, is public once the site is live. A site can be password-protected from its publish settings, and unpublishing it stops it being served.

We do not sell your personal data. We share data only with:

• The service providers named below, each for one job
• Law enforcement when required by law
• Successors in the event of a merger or acquisition

Running this service means other companies hold parts of your data. Each one below does a single job, and none of them is permitted to use your data for anything else.

• Hetzner Online GmbH (Germany) — the servers the application runs on.
• Neon Inc. (EU region, Frankfurt) — the database: your account, your workspaces, your pages and their version history.
• Cloudflare, Inc. — DNS, the network your requests travel over, and R2 object storage, which holds the images and files you upload.
• Upstash, Inc. (EU region) — short-lived session and rate-limiting data. No page content.
• Resend — sends the emails this service has to send: address confirmation, password reset, workspace invitations. It sees the recipient address and the message.
• Paddle.com Market Ltd — takes payment. Paddle is the merchant of record, which means it, not us, handles your card details; we never see them.
• Functional Software, Inc. (Sentry) — records errors so they can be fixed. An error report can contain the address of the page you were on and your account id.

If this list changes, this page changes with it before the new provider starts processing anything.

We use cookies and browser storage for signing you in and keeping you signed in. With your consent, we collect anonymized page view analytics to improve the Service. You can withdraw consent at any time from the cookie banner, or by clearing your browser's storage for this site.

We keep your account data for as long as your account exists. There is no separate retention period after that: deleting your account deletes it, not a flag on it.

Deleting your account also deletes every workspace you are the only owner of — the projects in it, the sites it publishes, their custom domains and the files you uploaded to it. A workspace you share with another owner stays, without you. Your email address is free to use again afterwards.

Backups are kept for disaster recovery and are rotated. Data you delete can persist in a backup until that backup expires; it is not restored into the Service except as part of recovering from a failure.

Depending on where you live, you may have the right to access your data, correct it, delete it, take it elsewhere, object to or restrict certain processing, and withdraw consent. Two of those you can exercise yourself, right now, without asking us:

• Get your data. Your profile → Your data → Download my data. It is a JSON file with your account, your workspaces and every project document in full. It does not contain passwords or tokens.
• Delete your account. Your profile → Your data → Delete my account. It happens immediately and cannot be undone.

For anything else — correction, restriction, objection, or a question about any of this — write to privacy@flowypixel.com.

Passwords are stored hashed with argon2id and are never recoverable, by us or by anyone else. Tokens we email you are stored as digests, work once, and expire. Access to a workspace is checked on every request against your membership of it, not against the address you ask from.

No system is completely secure. Use a strong, unique password, and tell us at security@flowypixel.com if you find a problem — we would rather hear it from you than from an attacker.

The Service is not directed to children under 13. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

We may update this policy. Significant changes will be announced by email or a notice in the Service, and the date at the top of this page always reflects the current version.

For privacy questions or data requests, write to privacy@flowypixel.com.