Privacy policy
Last updated 19 September 2026.
The short version
ogrender keeps the minimum it needs to run your account: your email address, your plan, hashed API keys and how many images you rendered each month. The HTML you send and the images you get back are not stored. There is no advertising and no analytics tracking, and the website loads no third-party scripts or fonts.
What we store and why
| Data | Why | Kept |
|---|---|---|
| Email address | Your account and sign-in links | Until you ask us to delete your account |
| Plan, Polar customer and subscription IDs | Knowing which plan you paid for | Until account deletion |
| API keys (a SHA-256 hash, the first 12 characters and the name you gave it) | Checking requests; showing your keys in the dashboard | Until account deletion |
| Number of renders per month | Quotas and plan limits | Until account deletion |
| Sign-in links (hashed) | Signing you in | Valid 15 minutes, single use |
| Server logs: IP address, time, requested URL, browser user agent | Security, abuse prevention and fixing errors | 14 days |
The legal basis is performing our contract with you (running your account and plan) and our legitimate interest in keeping the service secure (logs).
Rendering: the HTML and CSS you send are processed in memory to produce your image and are not written to disk or kept after the response. If your HTML loads a Google Font, our server (not your browser) fetches it from Google Fonts.
Cookies and local storage
ogrender sets one cookie, session, when you sign in. It is strictly necessary to keep you signed in and lasts 30 days. Cloudflare, which protects the site, may set a short-lived security cookie (__cf_bm) to tell people from bots. If you choose a paid plan before signing in, your browser's local storage remembers that choice until you finish signing in. We use no advertising or analytics cookies, so there is no consent banner.
Who else handles data
- Hetzner Online GmbH (Germany): hosts the servers and the database.
- Cloudflare: DNS, TLS and protection in front of the site, and forwarding of mail sent to @ogrender.dev addresses.
- Resend: sends sign-in emails, from its EU region.
- Polar: sells and bills paid plans as merchant of record. Polar handles your payment details under its own privacy policy; ogrender never sees your card.
Where one of these companies is based outside the EU, transfers rely on the safeguards it provides, such as the EU standard contractual clauses.
Your rights
You can ask for a copy of your data, to correct it, or to have it deleted, and you can object to processing based on legitimate interest. Email support@ogrender.dev; we answer within 30 days. You can also complain to the Hungarian data protection authority, NAIH (naih.hu), or the authority where you live.
Operator
ogrender is operated by Patrik Hudy, a private individual in Hungary.
Contact: support@ogrender.dev