Privacy Policy

Last updated: September 2026

1. What We Collect

  • Account data: email address and hashed password
  • Saved canvas content: only if you create an optional account and save one, stored encrypted
  • Session metadata: session key, access count, expiry time, all deleted when the session expires or the sender ends it
  • Usage data: standard server logs (IP address, timestamp, request path)
  • Daily totals: counts per day of times the share panel was opened, keys created, people who opened a key, how many viewers each key reached, device type (phone, tablet or desktop), the kind of site a visit came from (for example a search engine, or direct), and visits per country per month. These are counts only. The address, browser details and link used to work them out are not kept in them, and nothing in them says who you are or what was sent

2. What We Do Not Collect

We do not collect the content of shared text beyond the active session window. Without an account there is no persistent canvas storage at all.

3. How We Use Your Data

  • To provide and operate the service
  • To send transactional emails (account creation, password reset)

4. Third Parties

  • Resend: transactional email delivery
  • Render: hosting infrastructure

We do not sell or share your data with third parties for marketing.

5. Data Retention

Account data is retained while your account is active. You can delete your account at any time from Settings, which permanently removes your data. Session data is automatically purged after expiry. Daily totals are kept, since they contain nothing about you.

6. Cookies

We use a session cookie for authentication and a theme preference cookie. No tracking or advertising cookies are used.

7. Contact

Privacy questions? Email us at support@textportal.app