The service stores account name/email, membership, published files, access settings, activity records, source configuration and raw daily page counts. Authentication uses essential host-only cookies. Google is used for optional sign-in; Resend delivers sign-in codes and invitations; Cloudflare hosts the application and storage.
Data-source credentials are encrypted server-side and used only to fetch the configured source. They are not included in published files. Fetched data inherits the page’s visibility: a public page makes its data public.
IP-based counters limit abuse. Public pages and their links can be shared by anyone. Private page access is checked at request time. Deletion removes access immediately; stored objects are removed by scheduled cleanup. Some operational/audit records and backups may remain until their retention periods end.
Prelaunch draft: the operator must add its identity, contact, retention periods and applicable rights before public launch.