Privacy policy

Last updated: November 8, 2026

This Privacy Policy explains how EasyToggle (easytoggle.com) collects, uses, and shares information when you use our remote configuration service. By using the service, you agree to this policy.

1. Information we collect

Account information. Name, email address, password hash (we never store your password in plain text), email verification status, and session records (including approximate IP and user agent when provided by the browser).

Customer Content. Project names, draft configuration keys and values, published JSON documents, publish history, and public URL tokens. This content is stored so we can provide the product you signed up for.

Billing information. Subscription status, Paddle customer and subscription identifiers, price identifiers, and period end dates. Payment card details are collected and processed by Paddle (our merchant of record) and are not stored on our servers.

Operational logs. We may keep server logs needed to operate, secure, and debug the service (for example request times and error traces). We do not sell personal information.

2. How we use information

• create and authenticate accounts, and send verification or password-reset email;
• host and serve your remote configuration documents;
• enforce plan limits and show subscription status;
• prevent abuse, secure the service, and comply with law;
• respond to support requests you send us.

3. Public config URLs

Published configuration is available at unauthenticated public URLs that include a secret token. Anyone who has the URL can read that JSON. Do not put personal data of end users into remote config unless you understand that it may become publicly readable. You control what you publish.

4. Processors and sharing

We share information only as needed to run the service:

• Paddle — payments, invoices, taxes, and customer portal;
• Resend (when configured) — transactional email such as verification and password reset;
• service providers who host or operate infrastructure under contracts that limit their use of data;
• authorities when required by law, or to protect rights, safety, and the service.

We do not sell your personal information or Customer Content.

5. Retention

We keep account and Customer Content while your account is active. Publish history may be pruned according to your plan. After account deletion or a valid deletion request, we delete or anonymize personal data within a reasonable period, except where we must retain records (for example billing or legal obligations).

6. Security

We use reasonable technical and organizational measures appropriate for a small hosted service (including hashed passwords and access controls on the application). No method of transmission or storage is 100% secure. You are responsible for protecting account credentials and public URL tokens.

7. Your choices

You can update your profile name in the product, change your password, and delete projects or historical versions you no longer need. To request a copy of your personal data or deletion of your account, email support@example.com. We may need to verify that the request comes from the account holder.

If you are in the EEA, UK, or a similar jurisdiction with data-protection rights, you may also have rights to access, correct, delete, or restrict certain processing, and to lodge a complaint with a supervisory authority. Contact us first so we can help.

8. Children

The service is not directed to children under 16 (or the minimum age required in your country). We do not knowingly collect personal information from children.

9. Changes

We may update this policy by posting a new version on this page and changing the "Last updated" date. Continued use after changes means you accept the updated policy.

10. Contact

Privacy questions: support@example.com. Related documents: terms of service, refund policy.