Privacy, in plain English

Last updated: 11 April 2026

The short version: we store the bare minimum to make the product work. We do not track you, we do not sell your data, and we do not read the files you publish. If you want to leave, we delete everything on request.

What we store

When you sign in and publish a site, we keep:

Your sign-in details. Your username, avatar, and a secure access key so the app can publish on your behalf. The key is kept in an encrypted session that expires after 7 days of inactivity.
The list of sites you have published. Just names and web addresses, so you can see them on your "My sites" page.
Your email address (only if you give it to us for a custom name). Used to send you the receipt and renewal reminders.
A short publish log. The site name, file count, and timestamp of each publish, kept for 90 days to help us catch abuse.
Your IP address. Logged with each publish for 90 days, same reason as above.

What we do not store

The contents of your website. Your files go straight to your hosting account. Once a publish finishes, no copy exists on our servers.
Passwords. We never see them. Sign-in happens through your existing account provider.
Analytics, tracking pixels, or cookies for tracking. We use a single session cookie to keep you signed in. Nothing else.
Visitor data from your published sites. We do not know who visits your site or what they do there. That is between you and your visitors.

Who we share with

We do not sell your data. We do not share it with advertisers. We do not run it through marketing tools.

The only places your data goes:

Your hosting account (where your files get published). We send your files there on your behalf.
Stripe if you buy a custom name. They handle the payment. We never see your card number.
Porkbun if you buy a custom name. They are the registrar who actually owns the name on your behalf.
Law enforcement if we are legally required to comply with a valid request.

How to delete everything

You are in control. Two ways to wipe yourself off HTMLaunch:

From the app: open Settings, scroll to "Delete my account", and confirm. Your session, publish log, and site list are gone within 24 hours.
By email: write to admin@g2gadvisory.co.uk from the email address on your account and say "delete me". We will confirm within 2 working days.

Note that your published sites live in your own hosting account, not ours. Deleting your HTMLaunch account does not delete your published sites. You can remove those from your "My sites" page at any time before deleting your account.

Where your data lives

HTMLaunch runs on Cloudflare's global network. Your session data is stored in Cloudflare's encrypted key-value store. Cloudflare may process data in the United States, Europe, or other regions depending on routing.

Children

HTMLaunch is not aimed at children under 13. If you believe a child has created an account, email us at admin@g2gadvisory.co.uk and we will delete it.

Your rights (if you are in the UK or EU)

Under GDPR and UK data protection law, you have the right to:

See what data we hold about you
Correct anything that is wrong
Delete your data
Take your data elsewhere
Object to how we use it
Complain to your local data protection authority (in the UK, that is the ICO)

To use any of these rights, email admin@g2gadvisory.co.uk. We respond within one month.

Changes to this policy

If we update this policy, we will change the date at the top and, for any significant change, show a banner in the app the next time you sign in. Continued use after a change means you accept the new version.

Who we are

HTMLaunch is a product of G2G Advisory Limited, a company registered in England and Wales. For anything privacy-related, write to admin@g2gadvisory.co.uk.