Data processing and security

Roles

You own your site's data. We process it only to run the site, and do not use it for any other purpose.

Where data is stored

Sites, their databases and files run on Cloudflare infrastructure. Our account data is stored on servers we manage.

Security

• Your code is built in an isolated environment, with no access to secrets. Site secret values are never stored by us as plain text. All data in transit is encrypted (https).
• Every staff entry into a customer account is logged.
• Visit statistics for your site use no cookies and include no IP addresses or personal identifiers of visitors: only country, kind of source, page path, device class, browser family and a daily visitor code that cannot be traced back to a person. The IP address is used only for momentary rate limiting in the Cloudflare network and is never stored. We add no accessibility button and no cookie banner to your site: its accessibility, and consent for any cookies or tracking your own code adds, are your responsibility.

Security incidents

If a security incident affects your data, we will tell you as soon as possible, and explain what happened and what we did.