~*~ PRIVACY POLICY ~*~

We collect the minimum necessary to run the service:

• Your inputs — the name, interests, vibe, and any optional fields (favourite quote, band, pet) that you submitted when generating your page. These are stored in our database and used to generate and display your page.
• A hash of your IP address — we store a salted SHA-256 hash of your IP, not the IP itself. This is used for rate limiting and abuse prevention. We cannot reverse this hash to recover your IP address.
• Your email address — only if you upgrade to a paid page. Stripe collects it during checkout and we receive it so we can send you your management link and payment confirmation. If you stay on the free tier, we never ask for or store your email.
• View count — an aggregate counter that increments each time your page is visited. No information about visitors is stored.

No cookies (except Stripe's during the checkout flow — that's entirely on their side). No analytics scripts. No tracking pixels. No session identifiers. No user accounts. No passwords. No browsing history. No device fingerprinting. Nothing beyond what's listed in section 1.

When you visit a y2kpage.com page, nothing is tracking you. The site exists purely to show you (and the world) a beautiful retro homepage.

We use a small number of external services to keep things running:

• Stripe — payment processing. Stripe handles all card data. Their privacy policy governs their handling of your payment information.
• Resend — we use Resend to send transactional emails (your management link after payment, and payment confirmation). They receive your email address for this purpose.
• Cloudflare — the entire site runs on Cloudflare infrastructure: Workers for compute, D1 for the database, and R2 for file storage. Cloudflare's network processes all requests to y2kpage.com.
• Anthropic — the language model that writes your page from your inputs. Your name, interests, and vibe are sent to Anthropic's API at the moment of page generation. Anthropic's privacy policy applies to that data.

• Free pages and their inputs — automatically deleted 30 days after creation. We don't keep anything.
• Paid pages and their inputs — retained until you request deletion or email us. A self-serve delete button is coming soon to the management dashboard.
• IP address hashes — retained indefinitely as part of our rate-limiting state. Since these are one-way hashes, there's no meaningful personal data at stake, but we'll delete them on request.
• Recovery link requests — auto-pruned after 1 hour. They expire anyway, so there's no point holding onto them.

You can request deletion of your page and all associated data at any time by emailing hello@y2kpage.com. Include your page URL and we'll take care of it promptly.

Paid users will soon have a self-serve delete button directly in their management dashboard, so you won't need to email us at all. Until that's live, email works just fine.

If you're in a jurisdiction with formal data subject rights (GDPR, Quebec Law 25, etc.), the same email address handles those requests too.

y2kpage.com is not directed at children under the age of 13 and we do not knowingly collect personal data from children. If you believe a child has submitted data through this service, please contact us at hello@y2kpage.com and we'll delete it immediately.

We may update this privacy policy from time to time. When we do, we'll update the "last updated" date at the top of this page. If you're a paid user and we make a meaningful change to how we handle your data, we'll try to notify you via email.

We're not in the habit of making surprise changes. This policy exists to be honest with you, not to protect us from you.

Questions or concerns about your data? Email us at hello@y2kpage.com. We're real people and we'll actually respond.