Privacy policy
Account holders
When you create an account we store your email address, your name if you give one, a hash of your password, the times you sign in, the IP address and browser of each signed-in device (so you can see and revoke them), and everything you build. We use this to run the service, to email you about your account (confirmation, password reset, and the digests and alerts you switch on), and to keep the service safe. We do not sell it.
AI processing
When you use an AI feature, the text you type, the site you are editing and, for style copying and Figma matching, screenshots of the pages involved are sent to Anthropic's API to generate the result. Anthropic's terms for API data apply. Analytics insights send an aggregated summary of your site's statistics, never individual visitors.
Visitors to published sites
Published sites include a small analytics script. It records, per page load: the page, the referring site, campaign tags in the link, the country derived from the IP address, browser, operating system, device type, screen size and language, time on page, how far the page was scrolled, which sections were visible for how long, clicks on links and buttons, form submissions (that a form was sent, not what it said) and page performance timings.
It does not set cookies. A visitor identifier is computed from a hash of the IP address and browser signature with a salt that changes every day, so a visitor cannot be recognised across days and the IP address itself is never stored. A short random id in the browser's session storage groups the pages of one visit. Site owners see aggregates only. Raw events are deleted after thirteen months.
Form submissions
What a visitor types into a form on a published site is stored for the site's owner, who is responsible for it. We hold it on their behalf.
Hosting and retention
Data is stored on servers in [location]. Backups are kept for seven days. When you delete a site or your account, its data is removed with it; backups age out within a week.
Your rights
You can see and change your account details on the account page, export any site as HTML, and delete sites or your account. For anything else — access, correction, deletion, a complaint — email [contact email]. If you are in the EU/UK you can also complain to your data protection authority.
Cookies we use
The studio itself uses one session cookie to keep you signed in, and a password-protected site sets one cookie to remember that the password was entered. Nothing for advertising.