Privacy Policy

Last updated: February 24, 2026

1. Introduction

HTMLPeek ("we," "us," or "our") operates the website located at htmlpeek.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service. By using HTMLPeek, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

  • Account information: email address, optional display name, and a hashed password when you register.
  • Content you create: HTML, CSS, and JavaScript code you paste or type into the editor, project names, and revision titles.
  • Share settings: share link options such as password protection preferences (passwords are stored as one-way bcrypt hashes), fork permissions, and expiry dates.

2.2 Information Collected Automatically

  • Log data: IP address, browser type, referring URL, pages visited, and timestamps when you access the Service.
  • Cookies & local storage: We store your theme preference (dark/light) in localStorage. We use a session cookie for authentication.
  • Rate-limit identifiers: For anonymous users, your IP address is used transiently to enforce usage rate limits. This is not stored long-term.

3. How We Use Your Information

We use the information we collect to:

  • Operate and provide the HTMLPeek service, including rendering previews and generating share links.
  • Authenticate your account and maintain your session securely.
  • Enforce rate limits and prevent abuse.
  • Communicate with you about your account (e.g., security notices).
  • Improve and debug the Service.

We do not sell your data. We do not use your code content for advertising or training machine learning models.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share information only in these limited circumstances:

  • Service providers: We use infrastructure providers (database hosting, cloud servers) to operate the Service. These providers process data only on our behalf and under confidentiality obligations.
  • Legal requirements: We may disclose information if required by law, subpoena, or to protect the rights, property, or safety of HTMLPeek, our users, or the public.
  • Share links: When you publish a share link, the HTML content you chose to share is accessible to anyone with that link. Password-protected shares require the recipient to enter the password you set.

5. Data Retention

  • Account data and projects are retained as long as your account is active.
  • Anonymous share links (created without an account) expire and are deleted after 30 days.
  • When you delete a project, all its revisions and share links are permanently deleted.
  • When you delete your account, all your data is permanently deleted.

6. Security

We take reasonable technical measures to protect your data, including:

  • Passwords are hashed using bcrypt and never stored in plaintext.
  • All data is transmitted over HTTPS.
  • Share links are unlisted — they are not indexed by search engines and are only accessible to people who know the exact URL.
  • JavaScript in previews is sandboxed and disabled by default.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Cookies

We use the following minimal cookies and storage:

  • Session cookie: Required for authentication. Deleted when you sign out.
  • Theme preference (localStorage): Stores your dark/light mode choice. Not transmitted to our servers.

We do not use third-party advertising cookies or tracking pixels.

8. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your account and all associated data.
  • Portability: Request your data in a machine-readable format.
  • Objection: Object to processing of your data in certain circumstances.

To exercise any of these rights, contact us at privacy@htmlpeek.com. We will respond within 30 days.

9. Children's Privacy

HTMLPeek is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

HTMLPeek
privacy@htmlpeek.com