Privacy
We keep your email, a hash of your key, usage counts and 30 days of request records. We do not keep the pages or HTML you render, or the results, beyond a cache of at most 24 hours. We use no trackers and send no marketing email. You can export or delete your data yourself.
Who we are
Copper Jerky LLC, an Arizona limited liability company doing business as Starhold, runs Render and decides how the data below is used.
What we keep, and for how long
Each period below says when its clock starts.
- Your email address. Kept while your account exists; the clock starts when the account is created and stops when you delete it. It identifies your account. It comes from your Starhold Account, which you sign in to with Google. Nothing else is asked for.
- A hash of your API key and its first characters, so you can recognise it. Kept until you rotate the key or delete the account. Your signing secret is stored encrypted, on the same terms.
- Monthly usage counts, to apply your allowance. Kept while your account exists.
- Request records: time, endpoint, result, how long it took, whether it was a cache hit, size, and for a URL render the hostname only. Never the path, the query or what you sent. Deleted 30 days after each request.
- Plan and purchase records from Polar: which plan, the period, the amount, the date and the provider reference, with no content. Kept up to 7 years from the purchase, because tax law requires it.
- Sign-in safeguards: a keyed one-way hash of your network address and of the email, to limit abuse. Treated as personal data. Deleted 7 days after the attempt.
- Sessions: a cookie that only identifies your session. Ends 30 days after you sign in, or when you sign out.
- Backups of the account database. Data removed from live systems drops out of backups within 30 days.
What we never keep
- The pages, HTML, CSS, parameters or images you send or fetch. Results sit in a cache for the time you chose, at most 24 hours (0 turns it off), and are then deleted. The cache is separate for each account and is left out of every backup.
- Raw IP addresses.
- Your content in logs. Logs hold an id, your account number, the endpoint, the result, timing, size and the hostname.
No trackers
No analytics, pixels, tag managers, third-party fonts or scripts on any page. Everything is served from our own host. We send no marketing or newsletter email.
Who helps us run this
- Polar takes payments as merchant of record and holds its own invoices.
- Starhold Account handles sign-in, with Google. Postmark sends account email.
- Backblaze B2 stores backups of the account database.
Your choices
On your dashboard you can download your data as JSON at once, rotate your key and secret, and delete your account. Deleting cancels and refunds any plan first, then removes your account, keys, sessions, usage records and cache entries from live systems immediately and from backups within 30 days. Only the purchase record described above is kept, as tax law requires. Polar keeps its own invoices.
Who can look at your account
We never ask for your password, never send sign-in links by hand, and never look at your account unless you ask us to or the law requires it. Any access is logged.
Last updated: 24 October 2026. See also the terms and the fair terms.