Privacy policy

The short version

• We collect what moime needs to work: your email, your profile and pages, and the files you upload.
• We don't sell personal data, we don't show ads, and we don't use advertising or tracking cookies.
• Visitors to your pages don't sign in. Likes use a random id, never their IP address.
• You can download all your data, and delete your account, yourself, in Profile.

Who is responsible

moime is run by CREATIVITY IS EVERYWHERE, LLC, a New York limited liability company, which is responsible for your personal data on moime (the “controller”). Write to hello@moime.app about anything in this policy.

The pages creators publish are their own. If a creator collects your details through a link on their page (a shop, a booking form, a newsletter), that is between you and them and their provider.

What we collect

When you make an account

• Your email address. With Sign in with Google, also the name and profile picture Google shares, and the sign-in tokens Google gives us for your account.
• Your username, display name, bio, location and profile image, and your design choices.
• Your pages and blocks: text, links, captions, promo codes, dates, and when you published them.
• The files you upload, with their name, type, size and dimensions. Photos are made web-sized in your browser before they are uploaded.
• When you add a link, moime's server opens that address to read its title and preview image, and keeps a copy of the image in your library.
• Your past usernames, for 30 days after a change, so old links keep working.
• If you change your email: the old and the new address and when, kept with your account so we can help if someone else made the change.
• The browsers you sign in on, for Devices in Profile and the “New sign-in” email: a label like “Safari on iPhone” (not the full browser details), the country our host works out from your IP address, and when you signed in. Not the IP address itself. A browser not used for a year is forgotten.
• If you lock your account with “This wasn't me”: when it was locked and unlocked.
• If you search for or buy a domain: the names and, for a purchase, the owner contact details. Those contact details are deleted once the domain is set up.

When you join the waitlist

• Your email, the username you want, an optional note and link, where you came from (for example a referral link), and your referral code.
• Entries that are never confirmed are deleted after a day.

When you report a problem

• What you write, the address of the page you were on, your browser and screen size, and the version of moime.
• A screenshot only if you choose to attach one. It is saved in your library like any other file.
• When something breaks, the browser or our server sends an error report: the error message, where in the code it happened and the page address. Never what you typed into a form or the content of your pages.

When someone visits a page

• Nothing that identifies the visitor is stored by moime. A like stores a keyed hash of a random id from a cookie.
• To stop abuse, some limits (sign-in emails, the waitlist, problem reports) count requests by a keyed hash of the IP address. The IP address itself is not stored, and the counts are deleted after about an hour.
• Our host keeps short-lived request logs, as every website host does (see Vercel below).

What we use it for

• To run moime: sign you in, save your pages, show published pages to visitors, and send the emails you ask for. (Legal basis in the EEA and UK: our contract with you.)
• To keep moime safe: rate limits, bot checks, reviewing public pages against the content rules, and acting on reports. (Legitimate interests: protecting visitors, creators and moime.)
• To fix problems and improve the product, from problem reports and error reports. (Legitimate interests.)
• To tell you about changes to moime, your account or these policies. We don't send marketing email without asking.
• To meet legal duties, such as answering a valid legal request. (Legal obligation.)

We don't sell or rent personal data, don't share it for advertising, don't build advertising profiles, and don't train AI models on your content. The flyer reader is the one exception to keep in mind: on the free tiers we use, Google and OpenRouter's model providers may use the images they receive to improve their models, under their own terms. Only the flyer you pick is sent, and only when you use that feature.

Service providers

These companies process data for us, only to provide their part of moime. Each has its own privacy policy and terms, which also apply to what they process.

• Vercel

  Hosting: runs the moime website and app.

  What it receives: Every request to moime passes through it, including your IP address and browser details, which Vercel keeps in short-lived request logs.

• Neon

  The database (Postgres).

  What it receives: Your account, profile, pages, file details, waitlist entries and the other records listed above.

• Cloudflare

  R2 file storage, Turnstile (a bot check on the waitlist and sign-in forms, when it is turned on), and later hosting.

  What it receives: The files you upload; for Turnstile, signals from your browser on those forms. If moime moves its hosting to Cloudflare, requests will pass through Cloudflare the way they pass through Vercel today.

• Resend

  Sends email: sign-in links, waitlist confirmations, invites, and messages about your account.

  What it receives: Your email address and the email we send you.

• Google

  Sign in with Google, and Google Safe Browsing to check the links on pages you publish.

  What it receives: If you use Sign in with Google: Google tells us your name, email address and profile picture. For Safe Browsing: the links on a page when it is published (not who you are).

• Stripe

  Payments, once paid plans start. Not used during the free beta.

  What it receives: Your payment details go to Stripe directly. We receive a reference, the plan and whether it is paid, never your full card number.

• Google Gemini and OpenRouter

  Reading an event flyer, when you choose “From a flyer” in the editor.

  What it receives: Only the flyer image you pick, and only when you use that feature. Gemini is tried first; OpenRouter passes the image to the model provider it uses. Their own terms and privacy policies apply to that image.

• Anthropic

  Automated content review of public pages against the content rules.

  What it receives: When it is turned on and you publish a page that others can see: its text and links, and your username, display name and bio. Images are not sent. The review only decides whether a person should look before the page goes public.

• Name.com

  Domain search, and later buying a domain.

  What it receives: The names you search for. If you buy a domain: your name and contact details as the domain's owner, which the registrar and registry require. Domain privacy is on by default.

Players from YouTube, Vimeo, Spotify, SoundCloud, Apple Music and Google Maps on creators' pages load only when a visitor taps them. Until then nothing is requested from those companies. Once a player loads, that company receives the visitor's request, and its own privacy policy applies.

Cookies and browser storage

moime uses only the cookies it needs to work. There are no advertising, analytics or tracking cookies, so there is no cookie banner.

• authjs.session-token: Keeps you signed in. It is a random token; the session itself is stored on our side, so signing out anywhere ends it. Kept for: 30 days, renewed while you use moime.
• authjs.csrf-token, authjs.callback-url: Protect the sign-in form and remember where to return after signing in. Kept for: Until you close the browser.
• authjs.pkce.code_verifier, authjs.state, authjs.nonce: Only during Sign in with Google: make sure the answer from Google belongs to this sign-in. Kept for: 15 minutes.
• moime_device: A random id for this browser, set when you sign in, so moime can list your devices and email you when a new one signs in. We store a keyed hash of it, never the id itself. Kept for: 1 year.
• moime_vid: A random visitor id, set only when you like something on a page, so one person counts as one like. We store a keyed hash of it, never your IP address. Kept for: 1 year.
• moime_start: Remembers the template you picked before signing up. Kept for: 24 hours, removed once your page exists.
• moime_join_email: While sign-up is invite-only: the email you typed at sign-in, so the waitlist form can fill it in. Kept for: 15 minutes.

The app also keeps a few things in your own browser, never sent to us: your appearance choice (light, dark or system), and unsaved edits in the editor, so a reload doesn't lose them.

How long we keep things

• Your account, pages and files: until you delete them or your account.
• Sign-in links: they work once, for 24 hours.
• Rate-limit counts: about an hour.
• Your devices list: while you use a browser, and a year after its last sign-in. Email changes and account locks: until you delete your account.
• Unconfirmed waitlist entries: a day. Confirmed entries: until you have joined, or until you ask us to remove them.
• Problem reports and error reports: while they help us fix problems. Reports you sent are deleted with your account; error reports stay, without the link to your account.
• Backups kept by our database host are overwritten within 30 days.

Downloading and deleting your data

Download. In Profile, “Download my data” gives you a ZIP file with your profile, all your pages and blocks, details of your files, and every original file you uploaded.

Delete. In Profile, “Delete account” deletes, straight away:

• your profile, all your pages and blocks (published ones too), and the likes on them;
• every file you uploaded, from storage;
• your sign-in on every device, and your link to Google if you used it;
• your waitlist entry and invite, and problem reports you sent;
• your custom domain settings (a domain you bought stays registered to you with the registrar).

A browser that already showed one of your files may keep a copy in its own cache for a while, and anyone who saved or shared your page has their own copy; we can't reach those.

Your username is held for 30 days so nobody can take it straight away; the hold stores only the username, not who had it. Error reports stay without the link to your account. Copies in backups are overwritten within 30 days.

If moime ever shuts down, we will email you at least 90 days before, and the download will keep working until the end.

Your rights

Depending on where you live (for example under the GDPR in the EEA and UK, or under US state laws such as California's), you can ask to see, correct, download or delete your data, and object to or restrict how we use it. Most of this you can do yourself in the app. For anything else, email hello@moime.app; we answer within 30 days. We don't sell or share personal data as those laws define it.

If you are in the EEA or the UK and think we got something wrong, you can complain to your data protection authority. We would rather you told us first, so we can fix it.

Where your data is processed

moime is run from the United States, and most of our service providers process data in the United States and other countries. When data from the EEA, the UK or Switzerland is sent to them, we rely on the safeguards the law provides for such transfers, such as the European Commission's standard contractual clauses in the providers' data processing terms.

Children

moime is not for children. You must be 13 or older to make an account, or 16 or older in the EEA and the UK. If you think a child under that age has an account, tell us at hello@moime.app and we will delete it.

Security

Everything is sent over HTTPS. Sign-in uses one-time email links or Google, so moime never stores a password. Files are kept in private storage, not a public bucket, and served through moime at addresses that can't be guessed. Only the operator can reach the database and storage. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

Changes

When this policy changes in a way that matters, we will email you or show a notice in the app before it applies. The date at the top says when it last changed. See also the terms of service.