Privacy

What we keep, and who sees it

As little as we can, and only the companies that help us run it.

Accuro makes Tweakpin. "We" here means the business in who we are.

What we keep

Your email. There are no passwords: you sign in with a link we send to your inbox.
Your studio's name, if you give it, and your logo, if you upload one.
If you ask to be told when hosting is ready: that email, for that one letter.
Your websites and the notes people pin on them.
The email of anyone you ask to look at a site, and of anyone who leaves a note.
If you came to us from a Google advert: the advert's id from the address you arrived at, kept with your account when you sign up. We keep it whether or not you accept Google's cookies, so that if you accept later we can still tell Google the sign-up came from its advert, and, if you pay for a plan, that it did and how much.
If a partner's link brought you and you accepted cookies: PromoteKit's id for that partner, kept with your account when you sign up and handed to Stripe when you pay, so the partner can be paid their share.

We keep these only so Tweakpin works. We never sell them.

Who else sees anything

These companies each do one job for us, and see only what that job needs:

Vercelruns our website. Everything you send us passes through it on the way.

Supabasekeeps our records: the things listed above.

Stripetakes your payment. They see your card and your email. We never see your card number.

Resendsends our emails, like your sign-in links. They see the email address and what the email says.

Umamicounts visits to our home page, the domains screen, try-it and the page you land on after signing in, and counts sign-ups and the steps before one: opening the video or try-it, reaching the prices, and choosing a plan. It uses no cookies and does not know who anyone is. It only counts, whatever you pick below.

Googleonly if you press Accept. Then Google's tag loads on those same four pages, sets its cookies, and counts three things: a brand-new sign-up, with the advert that brought you if there was one, asking for a sign-in link, and paying for a plan, with the amount paid. It never gets your card or anything Stripe holds. Until you press Accept, or if you press Reject, Google's tag is never loaded, nothing is sent to Google and nothing of Google's is kept in your browser.

PromoteKitruns our partner programme, only if you press Accept. Then its script loads on those same four pages and sets a cookie saying which partner's link, if any, brought you. When you pay for a plan it sees your email and what you paid, from Stripe, so it can work out that partner's share, and the partner can see your email and what you paid in their own portal. Until you press Accept, or if you press Reject, it is never loaded.

Cookies

Our own pages ask first, with a banner: Accept or Reject, and neither is picked for you. We remember your answer in your browser, and you can change it any time from the Cookies link at the foot of those pages. Pressing Reject after Accept removes Google's and PromoteKit's cookies. Our own cookies only keep you signed in.

None of this is ever on your clients' websites or in the review layer they use. Nothing of Google's, PromoteKit's or Umami's goes there.

Getting everything deleted

Close your account on the domains screen. That deletes your account, your websites and every note on them. You don't need to write to us.

Questions

Email hello@tweakpin.com and a person will answer.

Last changed 23 September 2026.