Privacy Policy

Effective date: 2026-10-11

House is operated by liwangchun, an independent developer based in China, responsible for the personal data described here. Privacy questions and requests: toolpackagetoolkit@gmail.com.

1. Information we use

• Account: verified email and account identifier from Google, used for sign-in and online saving. We do not receive your Google password.
• Designs: saved titles, layouts, styles and save times, used to store and display your work. Avoid adding sensitive details or home addresses.
• Payments: transaction and customer identifiers, plan and subscription status from Paddle, used to manage paid access. House does not store card numbers.
• Security and delivery: session records, temporary request counts, network addresses and request information processed by House and infrastructure providers to operate and protect the service.

Where relevant under applicable law, account and design processing supports our contract with you; security supports our legitimate interest in preventing abuse; applicable legal obligations may require other processing. Free designs can be tried without an account. Paid access is checked automatically; contact us about incorrect access decisions.

2. Storage on your device

Browser storage retains drafts and style choices until overwritten or cleared. Sign-in tokens are stored for the tab session and expire on the server after seven days; restored browser sessions may retain them. Sign out to invalidate your session. An essential sign-in cookie expires after ten minutes. Deleting your account does not remove local drafts or downloaded exports.

House does not use advertising trackers. When enabled, our own analytics records page paths and design, preview, sharing and download actions. A random browser identifier stored locally expires after 30 days; we store its hash with events for up to 90 days, deleting expired records when new events arrive or the owner opens the report. Analytics events do not include account credentials, emails, design contents, URL queries or sharing keys. Network infrastructure may still process IP addresses. We honor Do Not Track and Global Privacy Control for analytics. You can disable analytics in this browser below. Google and Paddle may use their own cookies and device information when you use their services; Paddle checkout loads when you start payment.

Disable usage analytics

3. Sharing and service providers

Saved designs are private by default. A public link exposes its title, layout and style to anyone with the link, but not your account email. You choose whether to post on X. Revoke links in My designs; copies made by others may remain.

Google handles sign-in under its Privacy Policy. Paddle handles purchases as a separate controller under its Privacy Notice. Website hosting: Cloudflare Pages. Account and design hosting: RackNerd. House does not sell personal information or share it for targeted advertising.

4. Retention and international processing

Account and saved-design records remain until deletion. Expired sign-in records are cleaned during later sign-ins; short-lived request counts during later requests. Payment-notification identifiers are cleaned after 90 days during later notifications, so physical deletion may occur later. Paddle retains its payment records independently.

We do not currently maintain scheduled application database backups. Server operational logs: Our retention policy for operational logs stored on our server is 30 days, with earlier removal when storage limits are reached. Service providers manage their own logs under their respective policies.

Backend location: New York, United States. Account and saved-design data is hosted in the United States. The independent developer operates from China and may access this data to provide support and maintain the service. Google, Paddle and Cloudflare may process information in other countries under their own privacy notices. Depending on where you live, processing may take place outside your country. We restrict database access and require HTTPS for production; no system is completely secure.

5. Your choices and rights

In My designs, you can export your data, delete designs and revoke public links. Self-service account deletion is blocked while a subscription remains active, paused, trialing or past due, or checkout is unfinished. Contact us to request earlier erasure. This does not limit statutory rights. Account deletion does not itself cancel billing or delete Paddle's independent records.

Depending on applicable law, you may request access, correction, deletion, portability or restrictions, object to processing, withdraw consent where relied upon, use an authorized agent, appeal a decision or complain to a privacy regulator. Contact toolpackagetoolkit@gmail.com; we may verify your identity and respond within applicable deadlines. We do not discriminate for exercising these rights. Since House does not sell data or use targeted advertising, there is no such activity to opt out of through Global Privacy Control.

6. Children and updates

House is for adults aged 18 and over. We do not knowingly collect children's information; contact us if you believe we have. We will update this policy when practices change and provide notice where required.