Scaffold

Template notice: this Privacy Policy is placeholder wording for the Cloudflare Astro + Hono scaffold. Replace it with counsel-reviewed text before relying on it in production.

Privacy Policy

Last updated: November 4, 2026

1. Who we are

This application (“Service”) is operated using the Scaffold template deployed on Cloudflare Workers. References to “we”, “us”, or “our” mean the operator of the deployed instance.

2. Information we collect

  • Account data — email address, display name, and authentication-related identifiers when you sign in with email OTP or Google.
  • Usage and technical data — IP address, browser type, device information, and pages viewed, when analytics are enabled and you have consented to non-essential cookies.
  • Uploaded content — files you choose to upload to object storage, if that feature is enabled.
  • Support communications — messages you send to our support email.

3. How we use information

  • Provide, secure, and improve the Service
  • Authenticate users and manage sessions
  • Send one-time login codes and important service notices
  • Measure traffic with Google Analytics 4 only after cookie consent
  • Comply with legal obligations and enforce our Terms of Service

4. Cookies and similar technologies

We use essential cookies for authentication and session security. Optional analytics cookies (GA4) load only if you accept cookies in the banner. See our Cookie Notice for details.

5. Sharing

We use subprocessors such as Cloudflare (hosting, email delivery, object storage), Neon (database), and Google (OAuth and, if enabled, Analytics). We do not sell personal information. We may disclose data if required by law or to protect the Service and users.

6. Retention

We retain account and operational data for as long as your account is active or as needed to provide the Service, resolve disputes, and meet legal requirements. Analytics data follows Google Analytics retention settings when GA4 is enabled.

7. Security

We apply industry-standard controls appropriate for a cloud-hosted SaaS (HTTPS, access controls, secrets management). No method of transmission or storage is 100% secure.

8. Your choices

  • Update or delete account data via Account settings where available, or by contacting support
  • Withdraw analytics consent by clearing site data / changing cookie preference
  • Opt out of Google Analytics via browser controls or Google’s tools

9. International transfers

Data may be processed in regions where our infrastructure providers operate. By using the Service you acknowledge such transfers as described in this template policy.

10. Children

The Service is not directed to children under 16 (or the age of digital consent in your jurisdiction). We do not knowingly collect their data.

11. Changes

We may update this policy. The “Last updated” date will change when we do. Continued use after changes constitutes acceptance of the revised policy where permitted by law.

12. Contact

Questions about privacy: use the support email in the site footer, or configure PUBLIC_SUPPORT_EMAIL for your deployment.