Privacy policy

What we collect

Your account. Your email address; a name for each device you sign in on, taken from the computer's name; when each device signed in and was last used; and, for the console, the name of the browser you signed in with.

Your shares. The address of the app you share on your machine, such as localhost:3000, and its start page; when each share starts and stops; how many bytes pass through it; and the email addresses you invite, with when each invite was sent and opened.

Sign-in. The codes we send are stored only in a form that cannot be turned back into the code, with how many attempts were made. The same applies to the links in our emails.

Request logs. Our servers log requests from the purlview command and the console, including the IP address they come from, the time and the result, to keep Purlview secure and working.

Visitors to a shared app. If you were invited, your email address and when you opened the invite. Your IP address is not recorded when you open a shared app, and it is not passed on to the app.

Emails you send us, and what we do about them.

What we do not collect

• The content of shared apps. Pages and data pass through our servers between your machine and your visitors, and are not stored or logged.
• Analytics or advertising trackers. There are none on purlview.com or in the console, and the purlview command sends no usage data.

Update check

Once a day at most, the purlview command asks GitHub whether a newer version exists. GitHub sees your IP address and the version you run. Set PURLVIEW_NO_UPDATE_CHECK=1 or DO_NOT_TRACK=1 to turn this off.

Cookies

Only the ones Purlview needs to work. On a shared app: one that remembers you saw the warning page, cleared when you close the browser, and one that keeps you in the app until the share stops. In the console: one that keeps you signed in for 30 days, and one that lasts 10 minutes while you sign in.

How we use it

To run Purlview: sign you in, run your shares, send the emails you ask for, and apply the limits. To prevent and investigate abuse and keep Purlview secure. To understand, in aggregate, how Purlview is used and improve it. To meet legal obligations. We do not sell personal data or share it for advertising.

Where the law of the EU, EEA or UK applies, we rely on performing our agreement with you, our legitimate interests in security, preventing abuse and improving Purlview, and legal obligations.

Who else handles it

• Amazon Web Services: servers, database and email delivery, in the United States.
• Cloudflare: DNS, and serving purlview.com and the console.
• GitHub: downloads and the update check.
• Microsoft 365: our support, abuse and security mailboxes.

We may disclose data when the law requires it, or to protect people or Purlview. Purlview is run from the United States, so your data is processed there.

How long we keep it

• Account, share and invite records: while your account exists.
• Request logs: 30 days.
• Database backups: 14 days.
• When you ask us to delete your account, we delete its data within 30 days; copies in backups then disappear as those backups expire. We keep a record of actions taken on abuse reports where we need it to protect people or Purlview.

Your choices and rights

Email support@purlview.com from your account's address to access, correct, export or delete your data. We answer within 30 days. Depending on where you live, you may also object to or restrict some uses, and complain to your data protection authority. We do not sell or share personal data as California law defines those terms.

Security

Traffic to Purlview is encrypted in transit, access to our systems is restricted, and codes and links are stored only in a form that cannot be turned back into the original.

Children

Purlview is not for anyone under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this policy. The date at the top changes when we do, and for significant changes we will tell you by email where we reasonably can.

Contact

Idyl Labs, Inc. · support@purlview.com