Your email, because a page has to belong to someone: one to sign in, and the address you pay with, which is also where we send the notice before a page runs out. What you make — your sentence, your page, anything you upload. Ordinary server records — request times and IP addresses, kept briefly to enforce rate limits and stop abuse.

We never see your card. Payments are handled entirely by Stripe; piko only learns that a purchase succeeded, which page it was for, and the email attached to it.

If your page has a signup field, those email addresses are yours, not ours. piko stores them on your behalf so you can read and export them, and does nothing else with them — no mailing, no analysis, no sharing.

That also makes them your responsibility: tell your visitors what you’ll do with their address, and honour it. Unpublishing a page deletes its signups along with it.

Only the services it takes to run piko: Stripe (payments), Resend (the sign-in and expiry emails), Fly.io (hosting), Tigris (storage for published pages), and Crema (a headcount of visits to piko’s own pages — never to the pages you publish). Each sees only what its job needs. Nobody buys data from us, because we don’t sell it.

Two, both functional: one that remembers the work in progress in your browser, and one that keeps you signed in. No analytics or advertising cookies: we do count visits to piko’s own pages, but with a script that stores nothing on your machine and follows you nowhere else. That is why you were never asked to dismiss a banner.

A published page and its signups live until its lifespan ends or you unpublish it, whichever comes first. Drafts live in your browser session and on our disk until you delete them. Account records — your email and which pages are yours — stay while the account does.

Ask and we’ll tell you what we hold, correct it, or delete all of it — hi@piko.so. Deletion means deletion: pages, signups, and the account record. Some payment records are kept because tax law requires it.