--- title: "Privacy policy" url: "https://miow.me/privacy" updated: 2026-10-29 description: "What personal data miow keeps about site owners and visitors, why, for how long, and who else handles it." --- # Privacy policy This policy says what personal data miow keeps, why, for how long, and who else handles it. It was last changed on 29 October 2026. ## Who we are Miow Ltd runs miow.me and every website it hosts. It is a company registered in England and Wales, number 17524444, with its registered office at 66 Paul Street, London EC2A 4NA. Write to [hello@miow.me](mailto:hello@miow.me) about anything in this policy. ## Owners' data and visitors' data Miow Ltd decides what happens to the data about the people who own sites here, so under UK data protection law it is the controller of that data. A site's owner decides what their site collects from its visitors through its contact form, comments and shop, so the owner is the controller of that data and Miow Ltd is their processor: it keeps that data only to run the site for them, under [the terms for owners](/terms#visitors-data-on-your-site). If you wrote to a site on miow, ask that site's owner first. They can read and delete your message; miow cannot answer for them. ## If you own a site ### What miow keeps - The name you give when you save a passkey. Miow asks for no email address, phone number or password. - Your passkeys' public keys. The private key never leaves your phone or computer. - Your signed-in sessions: a scrambled copy of each session's token and when it ends. Miow records no IP address or browser with a session. - Which sites you own, the invite links you make, and each site's history of changes, with who made each one. - Everything you put on your sites: pages, pictures and files. Pictures are re-encoded as they are uploaded, which removes the location and camera details a photo carries. - If you pay for hosting, the reference of the Stripe subscription. Stripe, not miow, holds your card, email address and billing address. ### Why - To give you the site you asked for: signing in, editing, publishing and billing. The lawful basis is our contract with you. - To keep miow secure and stop abuse, through rate limits and signing out other devices. The lawful basis is our legitimate interest in a service that works and is safe. - To keep the payment records that tax law requires. The lawful basis is a legal obligation. Without a name and a passkey miow cannot make you an owner, since a passkey is how it knows you. ### For how long - A session lasts 90 days, or until you sign out. - An invite link stops working after 14 days or its first use. - A site's history of changes is kept for 365 days. - A site and everything on it stay until an owner deletes it. Deleting a site removes its pages, pictures, messages, comments, stats and history. - A site an AI agent makes and nobody claims is deleted 7 days after it is made. - Your name and passkeys stay until you delete your account, with Delete account under Your sites at [miow.me/edit](/edit), or ask us to at [hello@miow.me](mailto:hello@miow.me). You cannot while you are the only owner of a site: delete it or invite another owner first. A site you own with others keeps your name beside the changes you made in its history. - Payment records are kept for six years, as tax law requires. ## If you visit a site on miow ### Stats Every site counts its visitors without cookies. For each page view miow keeps the page, the site that linked to it or its utm_source tag, the visitor's country, whether they used a phone, tablet or computer, and a code made from their IP address, their browser and a key that changes every day. The previous day's key is deleted, so the code cannot follow anyone from one day to the next, and miow stores no IP address with it. Miow also records words searched for on a site, clicks on links to other websites, and visits by AI crawlers and agents. Views are kept for 400 days. A site's owner sees its stats. Miow Ltd uses the same counts to set the site's [price](/pricing) and to spot abuse, on the basis of its legitimate interests; you can object at any time by writing to [hello@miow.me](mailto:hello@miow.me). ### Messages and comments A contact form sends the name, email address and message you type to the site's owners, and miow keeps them until an owner deletes them. A comment keeps the name you give and what you wrote, and shows both on the page once an owner approves it. To stop spam, miow counts how many messages, comments and new sites come from each IP address in an hour. The count is held in memory and never stored. ### Buying and giving You pay on Stripe's own page, into the site's own Stripe account. Stripe and the site's owner see what you enter there; miow keeps only which products have sold out. The basket stays in your browser until you check out. ## Cookies and browser storage | Name | Where | What it is for | How long | | --- | --- | --- | --- | | __Host-miow_session (cookie) | miow.me | Keeps an owner signed in | 90 days, or until signing out | | miow-cart (browser storage) | Sites with a shop | The basket | Until checkout | | miow-draft (browser storage) | miow.me's home page | The site you are editing | Until you publish it | | miow-welcomed (browser storage) | miow.me's home page | That the welcome film has been shown, so it shows once | Until the browser's storage is cleared | | miow-asked (browser storage) | Owner pages on miow.me | When a change was last asked of miow, so the editor can offer to undo it | Until the editor next opens, or the tab is closed | Each is needed for something you asked for, so miow asks no consent for them. Miow sets no advertising or tracking cookies. A site's owner can add things that load from other companies when you open the page, each under that company's own privacy policy: videos from YouTube, posts from X, maps from Google or Apple, typefaces from Adobe Fonts, and pictures kept on other websites. Typefaces from Google Fonts are served by miow itself, so your browser does not contact Google for them. ## AI When an owner asks miow to write or change a site, miow sends their request and the site's pages to an AI model through Vercel's AI Gateway. When an owner moves in a site from another address, miow reads that site's public pages and sends them to the same model. Miow uses only model providers that have agreed with Vercel to keep nothing they are sent and to train on none of it. Visitors' messages, comments and stats never go to a model. An AI agent that an owner connects to miow is the owner's own choice, and its provider's terms cover what it does with what it reads. ## Who else handles data | Company | What it does for miow | Where | | --- | --- | --- | | Vercel | Runs miow, stores its pictures and files, and connects it to AI models | United States and worldwide | | Supabase | Holds miow's database | Ireland | | AI model providers, through Vercel | Write and lay out pages when an owner asks | United States and elsewhere | | Stripe | Takes payments for hosting, and for each site's sales into its own account | United States and worldwide | Vercel keeps logs of requests, including IP addresses, for a short time under its own policy. Stripe is the controller of the payment data it collects, under [its own privacy policy](https://stripe.com/privacy). Miow Ltd sells no personal data and shares none for advertising. ## Data outside the UK The database is in Ireland, which UK law treats as protecting personal data adequately. Vercel, Stripe and the AI model providers may handle data in the United States and other countries. Those transfers rely on the UK Extension to the EU–US Data Privacy Framework where the company is certified under it, and otherwise on the EU standard contractual clauses with the UK's International Data Transfer Addendum. Write to [hello@miow.me](mailto:hello@miow.me) for a copy. ## Your rights Under UK data protection law you can ask for a copy of your data, have it corrected or deleted, limit what is done with it, and take it elsewhere. You can object at any time to anything done on the basis of legitimate interests, stats included. An owner can download a site's pages and pictures at any time from its Settings, under Download the site. Write to [hello@miow.me](mailto:hello@miow.me) to use any of these rights. We answer within a month. For data a site collected from you, write to the site's owner, and we help them answer. ## Complaints Complain to us first at [hello@miow.me](mailto:hello@miow.me); we acknowledge a complaint within 30 days and tell you what we are doing about it. You can also complain to the Information Commissioner's Office, the UK's data protection regulator, at [ico.org.uk](https://ico.org.uk/make-a-complaint/) or on 0303 123 1113. ## Security Owners sign in with passkeys, so there is no password to steal. Session tokens, invite links and agents' keys are stored only as scrambled copies, so a copy of the database cannot be used to sign in. Every page is served over HTTPS. If a breach puts your data at risk, we tell you, and the regulator where the law requires it, without undue delay. ## Children Owners must be 18 or over. Miow does not knowingly keep data about children except what a site's owner puts on their site. ## Changes to this policy We change this page when what miow does with personal data changes, and give the date at the top.