Terms of Service & Privacy Policy

This policy explains the data Mostly Page handles, where it is stored and processed, the third parties involved, and your choices.

In this Privacy Policy, "we," "us," and "our" refer to Justin Williams, the individual operator of Mostly Page. Privacy requests may be sent to support@mostly.page.

• Name, email address, and profile image when supplied by an authentication provider
• Authentication-provider account identifier used to link and recognize sign-ins
• Session identifiers and timestamps, IP address, and user agent used for security, rate limiting, abuse prevention, and operations
• Hashed one-time-code verification records needed to complete email sign-in
• The Mostly app where an account was established, a validated acquisition source when available, and first, last, and daily account-backed app-use observations
• A browser cookie remembers the last sign-in method used so the sign-in screen can highlight it
• Account role and Mostly+ entitlement status

Mostly Account sign-in uses emailed one-time codes or Google and Microsoft authentication when configured.

Local Page Data is stored in browser-managed storage for the current device. Downloaded Local Backups are files controlled by you.

• Personal Dashboard identifiers, titles, order, arrangements, timestamps, and responsive Widget layouts
• Widget Kinds, titles, Widget Options, Widget Data, and timestamps
• Scratchpad text, Checklist items, and completion times
• Launch Pad Shortcut labels, URLs, normalized URLs, and discovered or generated icon metadata
• RSS feed URLs, display preferences, and user-defined Widget titles
• Weather Location labels, rounded latitude and longitude values, and unit preferences
• Market Watch symbols and display preferences
• Countdown targets and labels, Timer durations, Today preferences, and World Clock labels and time zones
• Cached local identity bindings, active-dashboard preferences, and local sync metadata
• Local Backup ownership metadata, export time, app version, Personal Dashboards, and Widgets when you create a backup

• When enabled for an entitled account, Mostly Page sends account-scoped Personal Dashboard and Widget records plus synchronization metadata to infrastructure used to provide Mostly Page
• Cloud Data reconciles device-local replicas; it does not replace the device-local Personal Dashboard as the primary interaction model
• Synchronization metadata includes record and collection identifiers, versions, update times, device and mutation identifiers, and deletion markers needed for conflict resolution and retries

• Mostly Page sends a configured public RSS or Atom URL to infrastructure used to provide Mostly Page when you configure or view an RSS Reader Widget
• We retrieve the feed and store normalized feed, entry, publisher, validation, and retrieval metadata in a shared cache
• Feed snapshots are fresh for 30 minutes and have a configured maximum cache retention of one day; Widgets using the same normalized URL may share a snapshot
• Feed entry images remain external references, and the selected feed host receives ordinary server request information

• Mostly Page sends a configured Shortcut URL to infrastructure used to provide Mostly Page when you save, edit, or explicitly refresh a shortcut
• We may retrieve the linked page, web manifest, and a bounded set of icon candidates to resolve a label and icon
• Resolved labels and icon references are stored with Local Page Data
• The browser service worker may cache external Shortcut Icon responses for up to 360 days, subject to a 500-entry limit, browser eviction, storage pressure, or local-data clearing
• Selected site and icon hosts receive ordinary request information from infrastructure used to provide Mostly Page or your browser, depending on the request

• Weather Location search sends the entered place query directly from the browser to Open-Meteo
• Forecast retrieval sends saved rounded latitude and longitude values, unit preferences, and requested forecast fields directly from the browser to Open-Meteo
• Open-Meteo receives ordinary network request information, such as IP address and user agent, under its own privacy terms
• Mostly Page does not automatically track background location; browser geolocation may suggest a location only after you request it

• Authenticate users and maintain secure sessions
• Provide optional Mostly Cloud Data synchronization
• Read Mostly+ entitlement status and enforce feature access
• Bind Local Page Data to the correct Mostly Account on a shared device
• Provide Personal Dashboards, Widgets, Local Backup, and requested hosted operations
• Apply request limits, prevent abuse, diagnose failures, and maintain reliability
• Measure aggregate account acquisition and adoption across Mostly apps
• Respond to support, privacy, and legal requests

Each provider or third-party host processes data under its own terms and privacy policy.

• Cloudflare — application hosting, network delivery and security, operational logging and observability, account and session storage, transactional sign-in email delivery, bot protection, rate limiting, application data storage and databases, caching, Mostly Cloud Data storage, analytics
• Google — authentication; may provide a Google account identifier, name, email address, and profile image
• Microsoft — authentication; may provide a Microsoft account identifier, name, and email address; a Microsoft profile photo is not requested
• Open-Meteo — location search and weather forecasts requested from the Weather Widget
• User-selected feed and site hosts — RSS or Atom retrieval, Launch Pad metadata and icons, and outbound links requested or configured by you

You may request Mostly Account deletion from account settings in Mostly Page or Mostly Recipes, or by contacting us.

• Account, provider, session, entitlement, security, and operational records are retained as needed to provide and protect the Mostly Account, comply with legal obligations, resolve disputes, and enforce agreements
• You must cancel an active paid subscription and wait for in-progress AI work or Credit Pack purchases to finish before requesting deletion
• Accepted deletion requests revoke account access and remove your identity and active app data from active systems used by Mostly within 30 days
• Remaining Mostly AI Credits are forfeited when your account is deleted
• Account deletion does not remove app data stored locally in a browser or on another device, or downloaded backups; you must remove those copies separately
• Payment, security, and operational records may be retained when needed for legal obligations, fraud prevention, accounting, or dispute resolution
• Some user-scoped cloud objects and recovery copies may remain for up to 90 days after you request account deletion
• Ordinary sign-out retains Local Page Data on the device but hides it from unauthenticated use and other accounts
• Sign out and remove from this device deletes only the active verified account Local Page Data from that device; it does not delete a downloaded Local Backup or cloud-held copy
• Downloaded Local Backups remain wherever you store or share them, and we cannot delete user-held copies
• RSS feed snapshots have a configured one-day cache retention; Shortcut Icon responses may remain in the browser cache for up to 360 days unless evicted or cleared sooner

Depending on your location and applicable law, you may have rights to access, correct, delete, export, object to, or restrict processing of personal information.

Send requests to support@mostly.page. We will respond as required by applicable law.

We do not sell personal information or share it for cross-context behavioral advertising.

• We do not use advertising or cross-site tracking cookies
• We collect limited information about how you use Mostly Page to understand usage, improve features, and maintain reliability. This information may be linked to your Mostly Account using a coded identifier.
• Product analytics do not include the content you create or store in Mostly Page.
• Cloudflare may process IP addresses, requested URLs, timestamps, browser and device information, and diagnostic or security logs to provide and protect the service
• Because there is no uniform browser Do Not Track standard, we do not currently respond to Do Not Track signals

Mostly Page is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child supplied personal information, contact support so we can review and delete it where required.

We may update this Privacy Policy. When we do, we post the updated policy on this page and change the revision date at the top, so check the date to see whether it has changed since you last read it.

Privacy questions and data requests: support@mostly.page