HTMLOL · Legal

Privacy Policy

Last updated June 4, 2026

Here's exactly what HTMLOL collects, why, and who touches it — in plain terms.

1Who we are

HTMLOL is operated by West Village Ventures LLC, doing business as HTMLOL, a Pennsylvania limited liability company. This policy covers the Service at htmlol.lol.

2What we collect — and what we don't

We deliberately collect very little. The key thing to understand: the files you edit stay on your computer. We do not upload or store the contents of your local files unless you choose a feature that requires it (publishing a share or hosting an image). Specifically:

Email address

To sign you in. We send a one-time code to your email; there's no password.

Session data

A sign-in token and your preferences are stored in your browser's local storage to keep you signed in.

Filenames (metering)

To enforce the three-free-files limit, we store the names of files you take a metered action on — not their contents — linked to your account.

Billing data

If you subscribe, Stripe processes your payment. We store your Stripe customer ID, plan, subscription status, and renewal date. We never see or store full card numbers.

Published shares

If you publish a share link, the HTML you publish is uploaded and stored so it can be served publicly at htmlol.lol/share/<slug>.

Hosted images

If you host an image for email, that image is uploaded and stored, and served from a public URL.

Analytics

Aggregate, cookieless usage analytics (page views and the like) with no personal profiles and no cross-site tracking.

Error diagnostics

If enabled, technical error reports to help us fix bugs. These never include the contents of your files.

3How we use what we collect

to sign you in and keep your session active;
to count free files and enforce plan limits;
to process subscriptions and manage billing;
to serve the shares and images you publish;
to fix bugs, maintain security, and improve the Service;
to send you transactional messages, such as your sign-in code.

We don't use your data for advertising, and we don't sell it.

4Cookies and local storage

We don't use advertising or cross-site tracking cookies. Your browser's local storage holds your sign-in session and preferences (like your share settings) so the editor works between visits. Our analytics are cookieless.

5Who we share data with (subprocessors)

We use a small set of trusted providers to run the Service. They process data only to provide their part of it:

Supabase — authentication, database, and storage (your email, metering records, subscription status, and any shares/images you publish).
Stripe — payment processing and subscription management.
Vercel — hosting and cookieless web analytics.
Email delivery provider — sending your one-time sign-in codes.
Error-monitoring provider — diagnostic error reports, if enabled.

We may also disclose information if required by law or to protect our rights, users, or the Service.

6Anything you publish is public

Share links and hosted images are public by design — anyone with the URL can view them. Optional password-gating on a share is a convenience, not strong security. Please don't put sensitive personal information in content you publish. You can revoke a share at any time.

7How long we keep data

We keep your account and metering data while your account is active. Published shares and hosted images remain until you revoke or delete them, after which copies clear from backups and caches in the normal course. Billing records are retained as needed for legal and accounting purposes. You can ask us to delete your account and associated data.

8Your choices and rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. To make a request, email us at support@htmlol.lol and we'll respond within a reasonable time. You can stop using the Service and request deletion at any point.

9Security

We use reasonable technical and organizational measures to protect your data, including encrypted connections and access controls. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.

10Children

HTMLOL isn't directed to children under 13, and we don't knowingly collect their personal information. If you believe a child has provided us data, contact us and we'll delete it.

11Where data is processed

The Service is operated from the United States, and our providers may process data there. By using the Service, you understand your information may be processed in the U.S.

12Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above. Material changes will be reflected in the app.

13Contact

Questions about privacy, or want to make a data request? Email support@htmlol.lol.