Privacy

Last updated 18 October 2026. Stage is in early access. This page says plainly what we keep and why.

What we keep

• Your account: your name, email address and password (stored only as a secure hash), or, if you sign in with Google, GitHub or Figma, the name, email and picture those services share. We never see your passwords for those services.
• Basic technical data needed to keep the service safe: when you sign in, your IP address (used for rate limits) and a session cookie that keeps you signed in. No advertising or tracking cookies.
• Your work: the prototypes you publish, their versions, and the pins, comments, reviews and sign-offs people leave on them.
• Guests who leave feedback without an account: the name they give and, if they add it, their email.
• Connections you set up (GitHub, Figma, Claude, Cursor): an access token, stored encrypted, used only to import your work.

Google user data

If you sign in with Google, Stage receives your name, email address and profile picture (the openid, email and profile scopes). We use them only to create your account, show your name and picture to the people you work with, and send you the emails you ask for. We don’t ask for access to Gmail, Drive, Calendar or any other Google data.

Stage’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We don’t sell Google user data, use it for advertising, or let people read it except to run Stage, for security, or when the law requires it.

You can disconnect Stage from your Google account at any time at myaccount.google.com/connections. To delete the data we hold, see “Deleting your data” below.

How we use it

Only to run Stage: show your work to the people you share it with, send the review requests and notifications you ask for, and keep you signed in. We don’t sell your data, show ads or use your work to train AI models.

Who processes it

• Render (hosting) and Supabase (database and file storage, in Frankfurt, EU).
• Google Gmail (sending email), Microlink (taking a screenshot of a prototype for its thumbnail).
• Google, GitHub and Figma, only when you choose to sign in or connect with them.

Who can see your work

You choose for each prototype: only your workspace, anyone with the link, or nobody but you. Links you share can be opened by anyone who has them.

Deleting your data

You can delete a prototype or a project at any time, which removes its files. To delete your account and everything in it, email utkarshraj7540@gmail.com and we’ll do it within 30 days.

Contact

Questions about privacy: utkarshraj7540@gmail.com.