Privacy

htmlgate.com sets no cookies, runs no scripts, has no forms and no analytics, and loads nothing from other sites.

Cloudflare serves these pages. To keep the site running and to look into errors and abuse, it records each visit: the address asked for, the method, the answer and request details such as the IP address and the country. These records are kept for 3 days (7 on Cloudflare's paid plan) and then deleted. Cloudflare also keeps records of its own network, under its privacy policy.

Whoever installs htmlgate runs their own Instance, in their own Cloudflare account, and decides what happens to its data. htmlgate's maintainer receives nothing from those Instances.

app.htmlgate.com is the maintainer's own Instance. Its Drops open only for the people on its Allowlist, after they sign in, unless the Author makes a Drop public: then anyone with its /p/ link can open it.

To show each Drop only to those who may open it, and to protect that access, Cloudflare Access records each sign-in (who, when and from where), the Instance keeps the Drops published, the Author's email and the token that published each one, and Cloudflare records each request for 3 days (7 on the paid plan).

By default a Drop expires 30 days after its latest publish, but whoever publishes it can choose another date, or never. When it expires its content is deleted, and the Drop's record (title, description, tags, dates, the Author's email and the token of its last change) is kept, marked deleted; token names are kept too. Its Author can erase a Drop for good, record included, at any time. After that, the database's backups (D1 Time Travel) can still restore earlier states for 7 days (30 on the paid plan), and then they are gone too.

Only Cloudflare, the processor of this data: it runs the network and the servers and processes the data on behalf of the maintainer, who is the controller. Cloudflare is a United States company and processes data across its global network, so your data may be processed outside Brazil. Nothing is sold or used for advertising.

Under Brazil's General Data Protection Law (Law 13,709/2018, art. 18), you can ask for:

• confirmation that data of yours is here, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymisation, blocking or erasure of unnecessary or excessive data;
• portability of your data;
• erasure of your data;
• the list of who it was shared with.

Write to the address below. You can also complain to Brazil's National Data Protection Authority (ANPD).

The controller of this data is htmlgate's maintainer. For any request about your data, write to privacidade@htmlgate.com.