$ privacy
Last updated 7 November 2026.
preview-my-app is a developer tool for temporary preview links. This policy explains what we collect, why we collect it, how long we keep it and who processes it.
# what we collect
- Account data: email address, verification status, tenant name, plan, API-key metadata (prefix and hash) and timestamps.
- Link and invite data: link labels, ports, expiry, invite names and optional invitee emails, and view events (timestamp, country, user agent and path).
- Billing data: plan, subscription status and Stripe customer/subscription IDs. Payment details and the billing email are collected by Stripe; we do not store card data.
- Site analytics: page path, CTA label and A/B variant. We do not store your email or IP address in Analytics Engine.
- Email delivery: your address and the verification code are sent to Resend so we can deliver the email.
# why we collect it
We use this data to provide the service and verify your email (contract), to secure the service, prevent abuse and debug failures (legitimate interests), and to meet billing and tax obligations (legal obligation). We do not send marketing email and we do not sell personal data.
# processors
- Cloudflare — hosting, Workers, D1, KV, Tunnel and Analytics Engine. Privacy policy.
- Resend — transactional email delivery. Privacy policy.
- Stripe — subscriptions, checkout and payment processing. Privacy policy.
These providers may process data in the United States and other countries where they operate, using standard contractual clauses or the Data Privacy Framework where applicable.
# retention
| Data | Retention |
|---|---|
| Signup verification code and email | 24 hours after creation, even if the address is never verified. |
| Account email and tenant data | Until you delete your account. |
| Invites and invitee emails | Until the invite is revoked or expired, or the link is deleted. |
| View logs | 90 days. |
| Site analytics | About 90 days (Analytics Engine retention). |
| Billing records | As long as required by tax and accounting law. |
| Resend and Stripe logs | Per their own retention policies. |
# cookies and local storage
We store your theme preference and A/B variant in local storage. Link viewers get a scoped session cookie for the link they opened. We do not use advertising cookies or third-party trackers.
# your rights
Depending on where you live, you may have the right to access, correct, export, delete or object to the processing of your personal data, and to complain to your local data protection authority. To exercise these rights, email legal@preview-my.app.
Delete your account: email legal@preview-my.app with the subject “Delete my account” from the address you signed up with. We will delete the account and its links, invites and view data, except records we must keep for tax, accounting or legal reasons.
# security
API keys and verification codes are stored as hashes, links are tenant-scoped, and traffic uses TLS. No system is perfectly secure; if you find a vulnerability, email us before disclosing it publicly.
# children
The service is not directed to children under 16, and we do not knowingly collect their data.
# changes
We may update this policy. The date at the top will change when we do.