Privacy Policy

The data we touch is limited and predictable:

• Email address — used to send you sign-in links. Stored in our database.
• Page content you create — text, links, images, and layout you put on your page. Text and structure are stored in our database; uploaded images are stored in object storage.
• Sign-in session metadata — when you sign in we record the timestamp and an approximate location (country, region, and city) derived from Cloudflare’s edge network. We do not store your IP address on the session record itself. This is used to power security review (e.g. unfamiliar sign-in locations) and aggregated operational reporting.
• Page activity counts — when someone visits one of your pages or clicks a link on it, we count the event so we can show you view and click totals in your dashboard. We store a short-lived, hashed visitor token to deduplicate views in a 30-minute window; we do not store the raw IP address.
• Basic request logs — IP address, user agent, URL, and timestamp, kept by our hosting provider for routine operations and abuse prevention.

We do not currently run third-party analytics, marketing pixels, or session replay. If we add product analytics or error reporting in the future, we will update this policy and call it out.

A small number of HerePage staff with administrative privileges can view operational dashboards that summarize platform usage. These dashboards include aggregated counts (sign-ups, active users, sign-ins by country and city) and per-account totals such as number of pages and lifetime view and click counts. Staff use these views to operate the service, debug issues, prevent abuse, and provide support.

Staff do not read or edit the content of your pages outside of the limited cases needed to investigate a specific support request or a suspected violation of our Terms.

• To authenticate you (magic-link sign-in).
• To serve and display the pages you create.
• To debug, prevent abuse, and keep the service running.

We do not sell your data. We do not train machine-learning models on your content.

We rely on a small set of providers to run the service. Each has its own privacy policy.

• Cloudflare: hosting, database (D1), object storage (R2), serverless compute, and transactional email delivery for magic-link sign-in. See Cloudflare’s privacy policy.

We set a session cookie when you sign in. It is used only to keep you logged in. We do not use tracking cookies.

You can:

• Request a copy of the data we have about you.
• Delete your account and the pages associated with it.
• Correct or update your information.

For any of these, email us at help@here.page. We will respond within a reasonable timeframe.

HerePage is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

If we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email. Continued use of the service after a change means you accept the updated policy.

Questions about this policy or your data? Email help@here.page.