Privacy

What we record, why, and for how long.

Updated 2026-10-03

In short

We don’t collect personal data about the visitors of your site and don’t track them with cookies. We keep only what makes embeds work and lets us show you statistics: which place on which page showed which item, and how many times it loaded.

Visitors of your site

When someone opens a page with your code, we record:

the page address (without the # part and tracking parameters like utm_*), the place name, the item asked for, and a short description of the element holding the code (tag, id and first two classes, so you can tell places apart);
when the place was first and last seen, and daily counts of loads and impressions (numbers only).

We read the referring page (Referer) to check it is on one of your domains, but don’t store it. We don’t store visitors’ IP addresses, we set no cookies on the content domain, and the loader stores nothing in the visitor’s browser.

Some items come from other makers’ sites; inside the frame they connect to those sites directly and may use their own analytics or cookies under their own privacy policies. Items made by iframe.app use no third-party trackers; settings such as game progress stay in the visitor’s own browser and are never uploaded.

Site owners (you)

The site name, contact and domains you give when joining, and the note in an application;
of your licence key we keep only a one-way fingerprint and its first characters — we can’t see the full key either;
the console uses one sign-in cookie, which expires after 14 days and is removed when you sign out;
to stop abuse, sign-up, application and sign-in attempts are counted against a one-way keyed hash of the IP address, deleted after about a day (an application keeps that hash to spot duplicates);
changes you make in the console or through the API are logged (who, when, what) so they can be undone and looked into.

This website

Pages of iframe.app itself may use Cloudflare Web Analytics, which uses no cookies and collects no personal data. All requests pass through Cloudflare’s network.

We don’t sell data and don’t share it with advertisers. We disclose information only when the law requires it.

Seeing and deleting your data

Your account details and embed data are all visible in the console. To export or delete your account, contact us through the channel your invite came from.