Terms of Service & Privacy Policy

This policy explains data held locally, data handled by infrastructure used to provide Mostly Page, data sent to requested third parties, and your choices.

In this Privacy Policy, "we," "us," and "our" refer to Justin Williams, the individual operator of Mostly Page. Privacy requests may be sent to support@mostly.page.

• Email address; name, display name, and profile image when supplied by an authentication provider
• Google and other linked-account identifiers used for authentication
• Account role, Mostly+ entitlement status, and Stripe customer and subscription identifiers used to start checkout or open subscription management
• Session identifiers and timestamps, IP address, and user agent used for security, rate limiting, abuse prevention, and operations
• Encrypted authentication credentials and verification records needed to maintain authentication
• The Mostly app where an account was established, a validated acquisition source when available, and first, last, and daily account-backed app-use observations

Mostly Page currently offers Google authentication for people using the service and does not offer email-and-password sign-in.

Local Page Data is stored in browser-managed storage for the current device. Downloaded Local Backups are files controlled by you.

• Personal Dashboard identifiers, titles, order, arrangements, timestamps, and responsive Widget layouts
• Widget Kinds, titles, Widget Options, Widget Data, and timestamps
• Scratchpad text, Checklist items, and completion times
• Launch Pad Shortcut labels, URLs, normalized URLs, and discovered or generated icon metadata
• RSS feed URLs, display preferences, and user-defined Widget titles
• Weather Location labels, rounded latitude and longitude values, and unit preferences
• Market Watch symbols and display preferences
• Countdown targets and labels, Timer durations, Today preferences, and World Clock labels and time zones
• Cached local identity bindings, active-dashboard preferences, and local sync metadata
• Local Backup ownership metadata, export time, app version, Personal Dashboards, and Widgets when you create a backup

• When enabled for an entitled account, Mostly Page sends account-scoped Personal Dashboard and Widget records plus synchronization metadata to infrastructure used to provide Mostly Page
• Cloud Data reconciles device-local replicas; it does not replace the device-local Personal Dashboard as the primary interaction model
• Synchronization metadata includes record and collection identifiers, versions, update times, device and mutation identifiers, and deletion markers needed for conflict resolution and retries
• Mostly Page verifies a current Mostly Account session and Mostly+ entitlement before hosted Cloud Data operations

• Mostly Page sends a configured public RSS or Atom URL to infrastructure used to provide Mostly Page when you configure or view an RSS Reader Widget
• We retrieve the feed and store normalized feed, entry, publisher, validation, and retrieval metadata in a shared cache
• Feed snapshots are fresh for 30 minutes and have a configured maximum cache retention of one day; Widgets using the same normalized URL may share a snapshot
• Feed entry images remain external references, and the selected feed host receives ordinary server request information

• Mostly Page sends a configured Shortcut URL to infrastructure used to provide Mostly Page when you save, edit, or explicitly refresh a shortcut
• We may retrieve the linked page, web manifest, and a bounded set of icon candidates to resolve a label and icon
• Resolved labels and icon references are stored with Local Page Data
• The browser service worker may cache external Shortcut Icon responses for up to 360 days, subject to a 500-entry limit, browser eviction, storage pressure, or local-data clearing
• Selected site and icon hosts receive ordinary request information from infrastructure used to provide Mostly Page or your browser, depending on the request

• Weather Location search sends the entered place query directly from the browser to Open-Meteo
• Forecast retrieval sends saved rounded latitude and longitude values, unit preferences, and requested forecast fields directly from the browser to Open-Meteo
• Open-Meteo receives ordinary network request information, such as IP address and user agent, under its own privacy terms
• Mostly Page does not automatically track background location; browser geolocation may suggest a location only after you request it

• Authenticate users and maintain secure sessions
• Bind Local Page Data to the correct Mostly Account on a shared device
• Provide Personal Dashboards, Widgets, Local Backup, and requested hosted operations
• Provide optional Mostly Cloud Data synchronization
• Read Mostly+ entitlement status and enforce feature access
• Start Stripe-hosted Mostly+ checkout and open Stripe-hosted subscription management
• Apply request limits, prevent abuse, diagnose failures, and maintain reliability
• Measure aggregate account acquisition and adoption across Mostly apps
• Respond to support, privacy, and legal requests

Each provider or third-party host processes data under its own terms and privacy policy.

• Cloudflare — application hosting, network delivery and security, observability, account storage, caching, rate limiting, Mostly Cloud Data storage, and service-worker delivery
• Google — authentication and optional profile information when Google sign-in is enabled
• Open-Meteo — location search and weather forecasts requested from the Weather Widget
• Stripe — Mostly+ payment processing, Stripe-hosted checkout, and Stripe-hosted subscription management; Mostly Page does not store card numbers or payment credentials
• User-selected feed and site hosts — RSS or Atom retrieval, Launch Pad metadata and icons, and outbound links requested or configured by you

• Account, provider, session, entitlement, security, and operational records are retained as needed to provide and protect the Mostly Account, comply with legal obligations, resolve disputes, and enforce agreements
• Ordinary sign-out retains Local Page Data on the device but hides it from unauthenticated use and other accounts
• Sign out and remove from this device deletes only the active verified account Local Page Data from that device; it does not delete a downloaded Local Backup or cloud-held copy
• Clearing browser or site storage can independently remove Local Page Data and browser caches
• Downloaded Local Backups remain wherever you store or share them, and we cannot delete user-held copies
• RSS feed snapshots have a configured one-day cache retention; Shortcut Icon responses may remain in the browser cache for up to 360 days unless evicted or cleared sooner
• Cloud Data reflects synchronized changes and deletion markers; Mostly Page currently provides no destructive Mostly Account deletion control or account-wide Cloud Data purge guarantee

Depending on your location and applicable law, you may have rights to access, correct, delete, export, object to, or restrict processing of personal information.

Send requests to support@mostly.page. We will handle them as required by applicable law.

We do not sell personal information or share it for cross-context behavioral advertising.

• We do not use advertising or cross-site tracking cookies
• We use account-backed product analytics for account creation and at-most-daily app-use observations; signed-out visits are not assigned an analytics identity
• Cloudflare observability and other service providers may receive technical request and operational data when their services are used
• Because there is no uniform browser Do Not Track standard, we do not currently respond to Do Not Track signals

Mostly Page is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child supplied personal information, contact support so we can review and delete it where required.

Privacy questions and data requests: support@mostly.page