Privacy
What myportal collects, what it does with it, and how to get rid of it. Short on purpose.
What we collect
This is the whole list. Nothing is collected that is not named here.
Account
- Your email address, received from Google when you sign in.
- Your handle — the public address of your portal.
- Whether you are on the free or the paid plan.
Portal content
- Whatever you put in a portal: name, bio, links, labels, and the images you upload.
- The look you chose: template, colours, layout, and where each element sits.
Technical
- A session cookie that keeps you signed in.
- Server logs kept by our hosts for security and debugging, which include IP addresses.
A portal is public. Everything you put in one — your photo, your bio, your links — is visible to anyone who opens its address. That is the point of it. Don’t put anything in a portal you wouldn’t put on a poster.
What we don’t do
- We don’t sell or rent your data.
- We don’t use it to train anything.
- We don’t run ad networks or third-party trackers.
- We don’t build a profile of the people who visit your portal.
Cookies
One cookie: the session that keeps you signed in. It is strictly necessary for the service to work, which is why you are reading this without clicking through a consent banner first.
When we count portal views and link clicks, we count events — a total goes up. No identifier is set, no profile is built, and we do not record where a visitor came from.
Who else touches it
A few providers run parts of myportal. They process data only on our instructions.
- Vercel — Hosting and delivery
- Supabase — Database, file storage and sign-in
- Google — Sign in with Google
- Stripe — Payments for the paid plan
Beyond those, we disclose data only where the law requires it.
How long we keep it
- Your account and portals: for as long as your account exists.
- After you delete your account: gone immediately; backups roll off within 30 days.
- Payment records: kept as long as tax law requires, and not deletable on request.
Your data, your call
You don’t need to ask us to delete your account. Open your account settings and delete it yourself. It removes your profile, releases your handle and permanently deletes every portal you made, straight away.
For a copy of your data, a correction, or anything else — including the rights you have under the GDPR if you are in the EU or the UK, or under state privacy laws in the US — write to our contact address. We answer within 30 days.
Security
Data is encrypted in transit and at rest, and database rules mean one account cannot read another’s. No system is perfect; if a breach ever affects your data we will tell you.
Children
myportal is not for children under 13. If a child has made an account, tell us and we will remove it.
Changes
If this changes in a way that matters we will say so here, and email you if it is substantive. The date at the bottom is always the date of the last edit.
Questions: our contact address.