Your EPK data stays on your device — until you choose to publish. Everything you type into the EPK maker is processed in your browser and stored only in your browser's local storage. Nothing is uploaded unless you click "Publish online": that sends the press kit content you entered to our server so we can host it at a public link for you. Published EPKs are public web pages by design — don't include anything you wouldn't put on a poster. Publishing again from the same browser updates your page; clearing browser data removes your local draft and your page's update key.
Signing in is optional
You never need an account. Building an EPK, saving a PDF, downloading a web page and publishing to a public link all work signed out — that is the default, and it is not going to change.
If you choose to sign in with Google, we receive and store three things from your Google profile: your name, your email address and your avatar URL. We use them only to show you which account you are in and to list the EPKs you published, and we set one cookie (epk_s) so you stay signed in for 30 days. That cookie is a signed identifier — nothing else is stored in it, and it is not used for advertising or tracking across sites. Signing out clears it. Ask us to delete your account data and we will remove the record entirely.
Stopping abuse
To stop scripts from mass-publishing junk pages, we record a one-way hash of your IP address against a press kit you publish, and count how many kits that hash has created recently. We do not store the IP address itself and the hash cannot be turned back into one. It is used only to apply a publishing limit — never to profile, track or advertise to you.
What we do collect
Standard, anonymous web analytics (page views, referrers, approximate country) may be collected to understand which pages are useful. Apart from the Google profile details above — which only exist if you signed in — we do not collect names or emails. This site does not use advertising cookies.
Third-party services
This site is hosted on Cloudflare Pages, which processes requests (including IP addresses) to serve the site; published press kits and press photos are stored on Cloudflare's D1 and R2. Fonts are loaded from Google Fonts. If you use the optional sign-in, Google Identity Services handles the sign-in itself and Google knows you signed in here — the same as any "Sign in with Google" button. None of these services receive press kit content you have not published.
Contact
Questions about this policy: open an issue via the contact details on the site footer.