# preview-my-app privacy

Last updated: 7 November 2026.

preview-my-app is a developer tool for temporary preview links. This policy explains what we collect, why, how long we keep it and who processes it.

## What we collect

- Account data: email address, verification status, tenant name, plan, API-key metadata (prefix and hash), timestamps.
- Link and invite data: link labels, ports, expiry, invite names and optional invitee emails, view events (timestamp, country, user agent, path).
- Billing data: plan, subscription status, Stripe customer/subscription IDs. Stripe collects payment details and the billing email; we do not store card data.
- Site analytics: page path, CTA label and A/B variant. We do not store email or IP address in Analytics Engine.
- Email delivery: the address and verification code are sent to Resend for delivery.

## Why we collect it

To provide the service and verify email (contract), secure the service, prevent abuse and debug failures (legitimate interests), and meet billing and tax obligations (legal obligation). We do not send marketing email and we do not sell personal data.

## Processors

- Cloudflare: hosting, Workers, D1, KV, Tunnel and Analytics Engine.
- Resend: transactional email delivery.
- Stripe: subscriptions, checkout and payment processing.

These providers may process data in the United States and other countries where they operate, using standard contractual clauses or the Data Privacy Framework where applicable.

## Retention

- Signup verification code and email: 24 hours after creation, even if the address is never verified.
- Account email and tenant data: until account deletion.
- Invites and invitee emails: until the invite is revoked or expired, or the link is deleted.
- View logs: 90 days.
- Site analytics: about 90 days (Analytics Engine retention).
- Billing records: as required by tax and accounting law.
- Resend and Stripe logs: per their own retention policies.

## Cookies and local storage

We store theme preference and A/B variant in local storage. Link viewers get a scoped session cookie. We do not use advertising cookies or third-party trackers.

## Your rights

Depending on where you live, you may have the right to access, correct, export, delete or object to processing, and to complain to your local data protection authority. Email legal@preview-my.app to exercise these rights.

To delete your account, email legal@preview-my.app with the subject "Delete my account" from the address you signed up with. We delete the account and its links, invites and view data, except records required for tax, accounting or legal reasons.

## Security

API keys and verification codes are stored as hashes, links are tenant-scoped, and traffic uses TLS. No system is perfectly secure; report vulnerabilities by email before public disclosure.

## Children

The service is not directed to children under 16, and we do not knowingly collect their data.

## Changes

We may update this policy. The date at the top will change when we do.

## Contact

legal@preview-my.app