Privacy

Mostrel is a portfolio and link-in-bio service operated by HYPEWORKS LLC. The short version: we collect what the product needs to work, we don’t track your visitors, and we don’t sell data to anyone.

What we collect

• Account: your email address, display name, and — if you sign in with GitHub — your GitHub username and avatar.
• Your content: the profile, blocks, and images you publish. Published content is, by design, public.
• Contact-form messages: when a visitor writes to you through your page, we store their email address and message so we can show it in your inbox and deliver it to you.
• Billing, if you subscribe: we store which plan is active and when it renews. Your card details are entered on Polar’s checkout and never reach Mostrel — Polar is the merchant of record for paid plans and holds the payment and invoice records.
• Transient security data: IP addresses are used in-memory and as short-lived hashed counters for rate limiting and abuse prevention. They are not stored with your account or content.

What we deliberately do not do

• No advertising, no data sales, no third-party trackers on your public page.
• Visitor analytics (when enabled) are aggregate only: views, clicks, referrer domain, and country. No cookies, no fingerprinting, no per-visitor profiles.

Who processes data for us

Mostrel runs on Cloudflare (hosting, storage, email delivery) and PlanetScale (database). If you sign in with GitHub, GitHub processes that authentication; if you subscribe, Polar handles the payment. Each processes data only to provide their service to us. The subprocessor list names every one of them and what reaches it.

Retention

• Contact-form messages you archive are deleted automatically after six months.
• Your content stays until you delete it or your account.

Your rights

You can access, correct, export, or delete your data. Self-serve export and account deletion are being built; until they ship, email us and we’ll handle it directly.

Contact

privacy@mostrel.com (draft note: inbound routing for this address still needs to be configured).