Privacy Policy

Last updated: 7 June 2026

This policy explains what personal data SiteViewer collects, how and why we use it, who we share it with, and your rights. SiteViewer is operated by Made by Dave Group Ltd.

1. Who we are

Made by Dave Group Ltd ("we", "us") is the data controller for personal data processed through SiteViewer. We are a company registered in England and Wales, registered office First Floor, 39 The Metro Centre, Tolpits Lane, Watford WD18 9SB. Contact us via our contact form. ICO registration number: ZB357255.

2. Information we collect

• Account data: your email address, and any name you choose to add.
• Workspace and preview data: workspace name, subdomain, the files you upload, project titles, any passwords you set on previews (stored hashed, not in plain text), and version history.
• Content you upload: the HTML and assets you publish. This may contain personal data if you include it; you are responsible for that content.
• Usage data: when a preview is opened (for the owner's notifications and analytics), the requesting IP address and approximate country, browser and device information, and pages viewed.
• Feedback data: if you use review comments, the comments themselves, the name and email reviewers provide, and any screenshots or attachments they add.
• Payment data: if you subscribe, your billing details are collected and processed by Stripe. We receive limited information such as your plan, billing status, and the last four digits of your card. We do not store full card numbers.
• Communications: emails you send us and our records of them.
• Cookies and similar technologies: see section 4.

3. How and why we use it, and our legal bases

• To provide the service (host previews, send sign-in links, deliver notifications you configure): performance of our contract with you.
• To take payment and manage subscriptions: performance of our contract, and our legal obligations.
• To keep the service secure and prevent abuse (rate limiting, reputation checks, moderation): our legitimate interests in protecting the service and other users.
• To understand and improve the product through analytics: your consent (see cookies), or our legitimate interests where no cookie is involved.
• To comply with the law and respond to lawful requests: our legal obligations.

4. Cookies and similar technologies

We use a small number of cookies:

• Essential: a sign-in session cookie, and a cookie that records your cookie choice. These are necessary for the service and do not require consent.
• Analytics: PostHog and Google Analytics, which we load only after you accept cookies via our banner. If you decline, analytics do not load.

You can change your choice at any time by clearing the SiteViewer cookies in your browser.

5. Service providers we share data with

We use trusted providers to run SiteViewer. Each processes data only as needed to provide their service to us:

We may also share data where required by law, to enforce our terms, to protect rights and safety, or in connection with a business sale or reorganisation. We do not sell your personal data.

6. International transfers

Some providers process data outside the UK and European Economic Area. Where they do, we rely on appropriate safeguards such as the UK and EU Standard Contractual Clauses, or an approved adequacy mechanism (for example the EU-US and UK-US Data Privacy Framework). Our product analytics (PostHog) are hosted in the European Union.

7. How long we keep it

• Account and workspace data: while your account is active, and for a limited period afterwards for legal, accounting, and security reasons.
• Temporary previews published without an account: deleted automatically, currently within 24 hours, unless claimed.
• Previews you stop using: archived after a period of inactivity and deleted after a further grace period (currently 30 days after archiving). Inactive free workspaces may have their files cleared after prolonged inactivity (currently 12 months), with notice.
• Backups: routine backups are kept for a limited time and then overwritten.
• When you delete a preview or your account, we delete the associated files, database records, and feedback data, subject to the backup period above.

8. Your rights

Under UK and EU data protection law you have the right to access your data, correct it, delete it, restrict or object to processing, request portability, and withdraw consent at any time (without affecting processing carried out before withdrawal). You can exercise most of these directly: edit your details in your account, and delete previews or your whole workspace from settings. For anything else, use our contact form and we will respond within the time the law allows.

9. Security

We protect your data with measures including encryption in transit, hashed preview passwords, host-scoped session cookies, isolation of user-uploaded content on a separate origin from the dashboard, rate limiting, and access controls. No service can be completely secure, but we take reasonable steps to protect your data and will notify you and the regulator of a breach where the law requires.

10. Previews published without an account

When someone publishes a temporary preview without signing in, we process the uploaded content, the uploader's IP address (for rate limiting and abuse prevention), and basic view data, on the basis of our legitimate interest in providing and protecting the service. These previews and their data are deleted automatically as described in section 7.

11. Children

SiteViewer is not intended for children. You must be at least 18 to use it, and you must not upload personal data about children without a lawful basis.

12. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the "last updated" date, and tell you about significant changes where appropriate.

13. Contact and complaints

For privacy questions or to exercise your rights: our contact form, or Made by Dave Group Ltd, First Floor, 39 The Metro Centre, Tolpits Lane, Watford WD18 9SB. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.