Privacy Policy
Effective August 28, 2026, last updated September 2, 2026. Covers Preflight, Design Check, and Vantage.
What we collect
Using the free scan/check endpoints on Preflight or Design Check, we log the request itself (the URL or manifest you submit, the findings we return) and your IP address, kept only long enough to enforce rate limits and compute aggregate statistics. We don't require an account or email to use the free tier.
Subscribing to a Pro tier, or connecting a Google account to Vantage, involves more:
- Billing: Stripe handles your payment details directly: we never see or store your card number. We keep your Stripe customer and subscription ID, and the API key we issue you, tied to a hashed (not reversible) copy of that key.
- Vantage / Google Search Console: if you connect a Google account, we store an OAuth token (to read, never modify, your Search Console data) and whichever site properties you choose to add as clients. We don't request access to anything beyond Search Console read access and your email address.
Usage analytics: every product logs basic events: which pages get visited, which API/MCP calls get made, and high-level steps like starting checkout, so we can understand how these tools actually get used and fix what's broken. Anonymous visits are tied to an id that's a one-way hash of your IP address and browser, rotating every 24 hours; it groups same-day activity but can't follow you across days. If you have a Pro API key or a Vantage account, usage tied to that key/account is kept the same way any other account activity is (see above), not anything additional.
What we don't do
We don't sell or rent your data to anyone. We don't run ads or ad-tracking pixels on any product. We don't use cookies for tracking, only what's functionally necessary (e.g. keeping you signed into Vantage). The usage analytics above never set or read a cookie and never leave our own servers: no third-party analytics vendor sees your traffic.
Where data lives
Application data is stored in Cloudflare D1 (SQLite, hosted by Cloudflare). Payment processing is handled by Stripe. Neither Preflight nor Design Check currently send your scan/check content to any third-party AI provider on the free tier. See each product's /docs page for exactly what a Pro subscription changes.
Your choices
Email support@allthepossibles.com to request deletion of any data we hold about you: an API key, a Vantage workspace, or logged request history. We'll confirm once it's done.
Changes
If this policy changes materially, we'll update the effective date above. Continued use after a change means you accept the update.