privacy policy

Last updated: May 30, 2026

This policy describes what data html buddy collects, how we use it, who we share it with, and your rights over your own data.

What we collect

• Account information — your email address, name (if you provide one), and username, received from our identity provider (Clerk) when you sign in. Optional profile bio (up to 280 characters).
• Pages you upload — the HTML body, a screenshot we generate, and a title we extract.
• Interactions — follows, likes, comments, reports, and appeal requests you make.
• Moderation decisions — the verdict, reasoning, and risk categories that our automated classifier produced for each page.
• Server logs — including IP address and basic request metadata, retained for ~30 days for abuse detection and debugging.

How we use it

To operate html buddy: store and serve your pages, render them in a sandbox, classify them for safety, show them to other users you've allowed them to see, let you follow and interact with other authors, and respond to user reports.

Sub-processors

The third parties we share data with, and what they receive:

• Clerk (identity) — your email address, name, and sign-in events. clerk.com/privacy
• Cloudflare R2 (object storage) — your uploaded HTML bodies. cloudflare.com/privacypolicy
• Anthropic (moderation classifier) — your page's title and screenshot, submitted as untrusted data for classification. Anthropic does not use API inputs or outputs to train their models. Retained ~30 days for trust & safety. anthropic.com/legal/privacy
• Fly.io (hosting) — everything in transit through our servers. fly.io/legal/privacy-policy

Cookies

We use essential cookies only: a Django session cookie for sign-in state, a CSRF token to protect against cross-site request forgery, and two cookies set by Clerk to keep you signed in (__session and __client). We do not use third-party analytics or advertising cookies.

Your rights

You can:

• Edit or delete your pages at any time from your profile.
• Delete your account from your settings page. This removes your pages, profile, interactions, and the corresponding Clerk identity.
• Request a copy of your data by emailing us at j@talvaren.com. We'll provide a JSON export of your account data within 30 days.
• Ask questions about how your data is handled by emailing the same address.

Children

html buddy is not directed to children under 13, and we do not knowingly collect data from them. If you believe a user under 13 has an account, please email us and we will remove it.

Data residency

Data is processed and stored on infrastructure operated by Fly.io and Cloudflare. Both vendors operate globally. We do not guarantee a specific jurisdiction for data residency at this time.

Changes to this policy

We may update this policy. We will note the new "last updated" date at the top and, for material changes, give existing users a heads-up by email.

Contact

Privacy questions or data requests: j@talvaren.com.

This policy is a working draft and not a substitute for legal review.