Privacy.

Last updated 2026-11-11.

Who is responsible

The controller of your data is Bruno Dogbase, Esplanade du Pont 1 / 22, 4101 Seraing, Belgique, company number BE 1034.027.423.

What we store

For you, the account holder: your e-mail address, and whatever you put on your page: title, bio, avatar, blocks, projects, collections and posts, forms, and anything you upload (images, audio, a PDF attached to a link).

For your visitors: a page view, recorded per visit and per link click, holding a salted hash of their IP address (never the address itself), plus the country your visitor's request claims (from request headers, not looked up), the page the referral came from (its domain only, dropped entirely for visits from your own page), the device type, operating system and browser family we can tell from their user agent, and the user agent string itself. If someone subscribes to a newsletter block or sends a message through a contact block, we store what they typed (their e-mail or their message) so it reaches you, the page owner.

Why, and on what basis

• Your e-mail signs you in, with a magic link: no password to store. Your page content is the product. Both rest on the performance of the contract between you and the service.
• Visitor data drives the Stats you see in your dashboard: how many people saw your page, which links they clicked, and roughly who they were, without ever keeping an address that could re-identify someone. Security, abuse limits (the rate-limit counters) and those aggregate views rest on our legitimate interest in running a safe service.
• Invoicing a Pro subscription rests on a legal obligation to keep accounting records.

How long

• Magic link: valid for 15 minutes. We keep a fingerprint of the link, never the link itself, with the e-mail address and the dates it was issued and used. Those records are erased within 48 hours after the link expires, whether it was used or not, or with your account if that comes first.
• Session: 30 days, or until you sign out or revoke it in Settings. A session is erased 7 days after it expires, 24 hours after it is revoked. We keep the browser, system and kind of device it was opened from, not the full user agent.
• Page views: deleted automatically once they are older than 13 months (396 days), or when you delete your account.
• Rate-limit counters, which hold the IP address of a request: five to fifteen minutes.
• Server logs: we deliberately write no request body and no e-mail address to them, but a rendering error can carry a technical stack trace. Cloudflare keeps them for its own period.
• Everything else lives as long as your account does.

Cookies

Only strictly necessary, first-party cookies, all set by us and all inaccessible to scripts:

• A session cookie that keeps you signed in (30 days).
• If a page you visit is password-protected, an unlock cookie scoped to that one page (30 days).
• While you sign in, a short memory of the handle you picked (20 minutes) and, if you came to buy Pro, of that intent (15 minutes).

No third-party cookies, no advertising, no cross-site tracking. Preferences such as sound stay in your browser's own storage and are never sent to us.

Who else sees it

These services process data for us, and only for what is listed.

• Cloudflare: runs the application (Workers, Durable Objects, KV, Hyperdrive), keeps your uploads (R2), sends e-mail (Email Service), serves custom domains and, where this instance turns it on, checks that a visitor is not a robot (Turnstile). It sees every request, including the IP address. Anywhere on its network.
• Supabase: the database, holding everything on this page. Frankfurt, Germany.
• Polar: takes payment for Pro as the merchant of record. It receives your e-mail address and an internal account number, and collects your payment details itself. Pica never sees them. United States.
• Resend: delivers an e-mail when Cloudflare's service cannot. It receives the address and the message. United States.

Cloudflare, Supabase, Polar and Resend are American companies, and Cloudflare serves requests from anywhere in the world: your data can leave the European Union. Each one commits to the European Commission's standard contractual clauses in its data processing terms (linked above), and Cloudflare and Resend are also certified under the EU-U.S. Data Privacy Framework.

We don't sell data, and we don't share it for advertising. There is no advertising.

Your rights

You have the right of access, rectification, erasure and portability, and the right to object to processing based on our legitimate interest. Export everything on your account any time from Settings: one click gets you a single JSON file with your page, blocks, subpages, collections and posts, forms and their submissions, newsletter subscribers, contact messages, and your page view history (the most recent 50,000 per page). Delete your account any time from Settings: it removes your page and everything hanging off it (blocks, subpages, collections and posts, forms and their submissions, newsletter subscribers, contact messages, page views) in one step, and the files you uploaded are removed from storage too, not necessarily at the same moment.

Polar, as merchant of record, keeps its own billing records of a Pro subscription. We keep encrypted backups of the database for 30 days, so deleted data leaves them within that time.

If you think we handle your data unlawfully, you can complain to the data protection authority of your country. In Belgium, that is the Autorité de protection des données.

Contact

Questions about this policy, or a request about your data: privacy@pica.page.