Privacy

We keep very little about you, we never sell it, and you can ask us to delete it at any time.

Draft. We are finalising this page before we open sales. Last updated 26 September 2026.

The short version

No advertising, no tracking cookies and no analytics on oncedone.app.
If you join a waitlist, we keep your email only to send you one message when that page launches.
If you buy a page, we keep what we need to build it and to look after it. Paddle handles your payment; we never see your card number.
You can ask us to see, correct, export or delete your data by emailing hello@oncedone.app. We answer within 30 days.

Who we are

OnceDone (oncedone.app) is a service that turns a short form into a live web page. We decide what happens to the personal data described on this page, and we are the person to contact about it.

Contact: hello@oncedone.app. The legal name and postal address of the operator will be published here before we open sales.

What we collect, and why

It depends on what you do.

Just looking around oncedone.app: we store nothing about you. The demo on the home page runs in your browser, and the name you type is not sent to us. If you press "Build it", the QR code holds a link to a sample page that shows that name. Opening the link shows the name on the page; it is not saved.
Joining a waitlist ("Tell me when"): your email address, the page you asked about and your language. We use it for one thing: to email you once when that page launches.
Filling in the order form: as you type, we save a draft so you can come back to it: your email address, what you typed, the address you picked and your chosen style. It is deleted automatically after 7 days if you do not buy. The preview you see beside the form is drawn from what you type and is not stored anywhere by itself.
Buying a page (when sales open): your email address, the content of your page (your name, text, links and images), and a record of the order (order number, amount, currency and status). We also store a fingerprint of your private edit link, never the link itself.
Reporting a page: what you write, the address of the page and, if you choose to give it, your email address (see Reporting a page below).
Writing to us: whatever you send.
Visiting someone's OnceDone page: we show the page. If you use its language switcher, your browser keeps one small cookie with your language choice (see Cookies below).

Like every website, the company that delivers our pages (Cloudflare) sees technical data such as your IP address and browser type, to deliver the page and to protect it from abuse.

Reporting a page

Every OnceDone page has a "Report this site" link. The report form asks which page and what is wrong. Everything else is optional: a few words, and an email address if you want a reply.

A person reads each report. We use it to decide whether the page breaks our Terms, and to reply to you if you gave an address. We do not tell the page's owner who reported it.

We do not sell your data and we do not share it for advertising. We use a few companies to run the service. They can only use your data to do that job for us.

Running today:

Companies we use today
Company	What it does for us	What data it sees
Cloudflare Cloudflare privacy policy	Runs the website and every customer page, stores our database, protects against abuse, and forwards email sent to our address.	Everything above: page content, waitlist and order records, and technical data such as IP addresses.

Starting when we open sales:

Companies we will use when sales open
Company	What it does for us	What data it sees
Paddle Paddle privacy policy	Takes payment, handles sales tax and VAT, sends invoices and processes refunds. Paddle is the seller of record.	Your payment details and billing information. These go to Paddle directly; we never see or store your card number.
Resend Resend privacy policy	Sends the emails we send you: your link, your QR code and your private edit link.	Your email address and the content of those emails.
Our automation server	A server we rent runs the automation that turns an order into a live page and checks that the page works.	Order events and your page's address. It does not receive your payment details.
A team chat tool	Sends us internal alerts about new sales and problems.	Your page's address and order status. No payment details.

Paddle is the seller of record for purchases, so it is also responsible in its own right for the payment details it collects. Our providers work worldwide, so your data may be processed outside your country. Each provider explains how it protects that in its own policy, linked above.

How long we keep it

How long we keep each kind of data
What	How long we keep it
Waitlist sign-up (email, page, language)	Until we send you the one email about that page's launch, then we delete it. Or sooner, if you ask.
An unpaid draft of your page	7 days, then it is deleted automatically.
Your page and the content you gave us	For as long as your page exists. We delete it when you ask.
The record of your order (order number, amount, currency, status)	For as long as tax and accounting law requires us to keep it.
Your private edit link	We store only a fingerprint of it (a hash), for as long as your page exists. The link itself is never stored.
A report about a page (what you wrote, the page, your email if you gave one)	Until we have dealt with it, then for up to 12 months in case the page comes back or someone asks about it. Then it is deleted.
Technical logs at Cloudflare	As set out in Cloudflare's own policy.

Your rights

Wherever you live, you can ask us to:

show you the data we hold about you
correct it
delete it
give you a copy you can take elsewhere
stop using it for something you object to

Email hello@oncedone.app. We answer within 30 days, and we may need to check it is really you first. If you are unhappy with our answer, you can complain to your local data protection authority.

Cookies

oncedone.app itself sets no cookies.

The order form uses your browser's local storage (not a cookie) for two things. Before you give us your email, what you have typed stays on your device only, so a refresh does not lose it: it is never sent to us, and it does not include your email. Once you give your email and we save your draft, the local copy is removed and your browser keeps only the number of your saved draft, so that reopening the form continues where you left off. That number is sent to us only to load the draft. Nothing else is kept there.

A page built with OnceDone sets one cookie, and only if you use its language switcher: a small "od_lang" cookie that remembers the language you chose, for one year. It is not used to track you and it never leaves your browser except to be sent back to the same page.

Children

OnceDone is not aimed at children, and we do not knowingly collect their data. If you think a child has given us data, tell us and we will delete it.

Changes to this page

If we change what we collect or who we share it with, we update this page first, and we email customers about changes that matter to them. The date at the top shows when it last changed.

This page describes today's service. Where it says "when we open sales", that part is not running yet.