Privacy Policy
Last updated October 25, 2026.
Widgeti at widgeti.ai (“Widgeti”, “we”) is operated by Widgeti.ai. Contact is by email only, including widget reports: support@widgeti.ai.
What we collect
- Account details you type in: name, email (or the admin username), and a password. We store the password only as a bcrypt hash.
- The widgets you save: names, folders, tags, and the HTML, CSS, and JavaScript you write.
- A session cookie (
wg_session) so you stay logged in. It is httpOnly. On the public site it is also marked Secure. The database stores a hash of the cookie, not the cookie itself. - If you pay, Stripe processes the card. When tax is turned on, Stripe also collects a billing address and, if you add one, a tax ID. We store Stripe’s customer id and subscription id, and which plan you’re on. We do not store your card number.
- For a few minutes at a time, a hash of your IP address and login email, used only to slow down signup and password guessing. We do not keep a raw IP log.
- If you use Generate with AI, how many tries you have used this month. We do not store the description you typed.
Hosted embeds
If you turn on a hosted embed, that widget is public. Free includes one live embed; Pro and Business can host more. The free embed shows a small “Made with Widgeti” link to widgeti.ai. Anyone with the link, and any site where you paste the snippet, can load it. Their visitors’ browsers request it from Widgeti. Don’t put secrets, private customer data, or anything you wouldn’t publish in an embed.
How we use information
We use it to run your library, enforce plan limits, take payment, prevent abuse, and keep the service working. We don’t sell personal information. We don’t use it for advertising.
Who else sees it
- Stripe, if you upgrade, to charge the subscription.
- OpenAI or Anthropic, only if you use Generate with AI. The description you type — and, when you refine, the current draft — is sent to whichever provider is configured. We store the monthly try count, not the prompt.
- The host that runs the app and database (Vercel and Neon) as our processors.
- Anyone you publish a widget to, for the widget content itself.
How long we keep it
Account and widget data stay until you delete the widget or ask us to delete the account. Sessions expire after 30 days. Rate-limit rows expire within an hour. Billing records may remain with Stripe as their policy requires.
Your choices
You can edit or delete widgets in the app. To delete an account, email support@widgeti.ai. There is no automated password-reset email yet — contact that same address if you can’t log in. Customers in places with privacy laws (including the EEA, UK, and California) can ask to access or delete personal information the same way. We will not discriminate against you for asking.
Children
Widgeti is not for anyone under 16. We don’t knowingly collect their information.
Changes
If this policy changes in a material way, we’ll update this page and the date at the top. Continued use after that means the new policy applies.