Privacy Policy

Every tool on this site — counters, cleaners, converters, the diff viewer, the Markdown editor — runs on your device. The text you type or paste into a tool is not sent to our servers, and there is no endpoint that accepts it.

The one exception is content you explicitly save. Using Save on a snippet, or adding something to My Stack while signed in, stores that content against your account so it can be read back later. Nothing leaves the browser until you take that action.

Favourites, saved snippets, collections, recent tools, and per-tool state (notes, checklists, timers, writing goals, drafts) are kept in your browser’s local storage. For compatibility with data saved before the rename, those keys still use the historical wordstack: prefix. That data stays on your device, is not readable by us, and clearing your browser storage removes it permanently.

Accounts are handled by Supabase, which acts as our authentication and database provider. Signing up with an email and password, or with an email magic link, means Supabase stores:

• your email address and, for password sign-in, a password hash;
• a profile row: display name and avatar URL if your sign-in supplies them, plus your plan and its renewal date;
• the content you save — pinned tools, saved snippets, collections, and a short record of which tools you recently opened.

Rows are scoped to your user id by row-level security, so one account cannot read another’s. You can delete individual saved items from My Stack at any time. To delete an account and everything attached to it, email support@neatkit.in.

Signed in, Supabase sets session cookies that keep you signed in and are refreshed as you navigate. They are required for accounts to work and are not used to profile you. Signing out clears them.

Your theme choice (dark or light) is a local storage value, not a cookie. We set no other cookies of our own.

The free plan is funded by ads. Ad space is reserved in the page rails on wide screens, in a single in-feed slot between sections on narrow ones, and in an anchored bar at the bottom of the screen on mobile. Pro accounts see none of them.

Those slots currently render an inert placeholder: no ad network is loaded until an AdSense publisher id is configured for the deployment. Once one is, Google AdSense serves the ads, and Google may set cookies or use device identifiers to select and measure them under its own terms — see how Google uses cookies in advertising. We do not pass your text, your saved content, or your email address to any ad network.

We use Vercel Web Analytics for aggregated traffic metrics — page views, visitors, and countries. It does not include session recording, heatmaps, or ad pixels from this product. Tool text you type or paste still never leaves your browser for analytics (or for any other purpose except when you explicitly save content).

Our host also records ordinary server logs (IP address, user agent, requested URL) to serve traffic and to deal with abuse. There is no tag manager and no cross-site advertising profile built from this analytics setup.

Only the providers needed to run the site: Supabase for authentication and stored account content, Vercel for hosting and Web Analytics (aggregated page views / visitors / countries), and Google AdSense for ads once it is enabled. When Pro checkout launches, the payment provider will additionally receive what it needs to take a payment. We do not sell your data or share it for anyone else’s advertising.

Saved content stays until you delete it or delete your account. Browser storage stays until you clear it. Session cookies expire on their own schedule and are cleared when you sign out.

For a privacy question, a data export, or a deletion request, email support@neatkit.in. If this policy changes in a way that affects what we store, the date at the top of this page changes with it.