Privacy
The short version: your artifacts are private by default, we do not sell or share anything, and we keep as little as the product can function on.
What we store
Your account email and name; the workspaces you belong to; the HTML files you upload and every version of them; the comments written on them; and a record of each time an artifact was opened.
What we deliberately do not store
No raw IP addresses — every one is hashed with a server-side salt before it is written, so we can count unique viewers without keeping an identifier we would have to hand over. No third-party analytics, no advertising pixels, no session recording. Artifact pages carry no tracker beyond our own view counter.
Who can see your artifacts
Whoever you decide. Artifacts are private to your workspace until you change that, and the setting is enforced on every request rather than by keeping the address secret. Public artifacts stay out of search engines unless you explicitly opt in.
Sign-in links, invitations and comment notifications are sent through our mail provider. Notification emails can be switched off per channel in your settings; sign-in and invitation emails cannot, because they are how the product works.
Deleting your data
Deleting an artifact removes every stored version from object storage along with its comments and view records. Deleting a workspace does the same for everything inside it. Both are immediate and neither is recoverable — there is no soft-delete holding pen behind them.
Getting in touch
Write to hello@arti.host for anything, including a copy or deletion of your data.