- SupabaseThe database.
- Your account record, your artifacts’ details and versions, the data visitors submit into your artifacts, comments, and messages sent through the contact form.
- VercelHosts superartifacts.app, the dashboard and this site.
- Every request to superartifacts.app, including your IP address and browser, in request logs that expire within days.
- CloudflareServes artifacts on superart.page, stores their files, and runs DNS.
- The files your artifacts are made of, and every request to them. A visitor’s IP address is turned into a one-way digest for view counts and is not stored.
- WorkOSSign-in.
- Your email address, your name, and your password or the account you sign in with.
- StripeBilling.
- Your card and billing details. We never see your card number.
- ResendSends our email: sign-in, invitations and notifications.
- The address each email goes to and what it says.
- PostHogProduct analytics.
- Pages viewed and clicks on superartifacts.app, and, for some sessions, a recording with what you type masked. When you are signed in, your account id, email and name.
- SlackInternal alerts and contact messages, for the team.
- Contact form messages, marketplace templates sent for review, and a first name or workspace name when a workspace reaches a milestone.
- GoogleThe booking calendar, only if you book a call.
- The name, email and anything else you enter on the booking page.