Summary
You sign in with Google; we keep your links, your plan and the minimum needed to run them. No ads, no tracking on published pages.
Your account
When you sign in with Google (through Firebase Authentication) we receive your Google account ID, name, email address and profile picture. We use them to identify you, show your account and match Gumroad purchases to you. We never receive your Google password. API keys are stored only as one-way hashes.
When you publish
- Your files — stored on Cloudflare's network and served at your link until it expires (Free plan) or until you delete it or your paid plan ends plus a 3-day grace period.
- Link details — the owner account, creation and update times, expiry, size, file count, the page title, and a salted hash of the password if you set one. Deleted with the link.
- IP address — used transiently for rate limiting; not stored with your link.
Payments
Paid plans are sold by Gumroad, which processes your payment details under its own privacy policy. We receive the sale and subscription IDs, the plan, the purchase email and the subscription status — never your card details.
In your browser
An unsent draft of pasted HTML is kept in your browser's local storage. Firebase keeps your sign-in session in the browser.
When someone visits a published page
We do not add analytics or tracking cookies to published pages. Password-protected pages set one strictly necessary cookie to remember access. Cloudflare processes standard request data (such as IP address) to deliver and protect the service.
Abuse reports
Reports, including the reporter's optional email address and IP address, are kept for up to 90 days for review.
This website
The tools on htmltourl.dev run in your browser and do not upload your content. If analytics are enabled on this marketing site, visitors in regions that require consent are asked first, and published pages are never included.
Contact
Privacy questions or requests: support@htmltourl.dev.