Privacy
What PostImager stores during the beta, why, and for how long.
Last updated 3 November 2026
Who runs PostImager
PostImager is run by Harman Singh, India. Contact: support@postimager.com.
What is stored
- Your name, email address and a hash of your password. If you connect Google, the link to that Google account.
- If you ask for an invite: your email address and what you wrote, used only to answer you.
- What you send to render: the template, the field values and any image address you provide. Images are fetched by the server, not by your browser.
- The files PostImager produces, your webhook settings and delivery records, and how many renders you have used.
- Your IP address and browser type, with your sign-in session and to enforce rate limits.
This is used to run the service: signing you in, producing and delivering your files, enforcing limits and fixing faults. There are no advertising or analytics trackers, and your content is not sold.
How long it is kept
| Data | Kept |
|---|---|
| Rendered files and thumbnails | 7 days, then deleted automatically |
| Download links | Valid for 24 hours |
| Sign-in sessions | 7 days, or until you sign out or reset your password |
| Account, API keys (stored as hashes), render history and usage records | Until you delete your account or revoke the key |
| Invite requests (your address and what you wrote) | Deleted if declined, after 90 days without a decision, or when you delete your account |
| Encrypted backups | Deleted after 30 days |
| Server logs (request details such as IP address, ids and error codes, not your content) | Up to 30 days, set by the host |
Deleting your data
Settings, then Delete account, removes your account, renders, files, keys and sessions straight away. Copies in backups are gone within 30 days. To ask for a copy of your data or a correction, email support@postimager.com.
Cookies and browser storage
Sign-in cookies keep you logged in. Your browser also stores unfinished render values for up to 7 days so you do not lose them; they stay on your device and are cleared when you sign out. There are no third-party cookies.
Services that handle data
The beta is open to people in any country. Stored data is kept in Singapore, and requests are handled by Cloudflare near where they come from, so data may cross borders.
- Cloudflare: runs the service and the browser that draws your images, in the data centre nearest the request.
- GitHub: keeps encrypted backups privately.
- Neon (Singapore): the database, including rendered files.
- Resend: sends account emails such as verification and password reset.
- Google: optional sign-in, only if you choose it.
- Have I Been Pwned: checks new passwords against known breaches. Only the first 5 characters of a hash of the password are sent, never the password.
Changes
If this page changes, the date at the top changes too. Questions: support@postimager.com.