Privacy

Who is responsible

Layout is run by Simon Lange, who decides what is collected here and why. For anything on this page, email hello@layout.im.

Browsing without an account

Nothing about you is stored, and no cookies are set unless you accept analytics. The site is served by Vercel. Like any web host, its servers see each request: your IP address, the page and your browser. Vercel keeps those logs briefly to run and protect the service.

With an account

Making an account stores:

• Your email address, to sign you in. There is no password: a one-time code is emailed to you instead, and it stops working minutes after it is sent.
• A display name, taken from your sign-in provider or the start of your email address. You can change it on your profile.
• The layouts you save, and when you saved them.
• Your weekly digest choice. It is off unless you turn it on.

If you sign in with Google or GitHub, they share your name and email address with us, and nothing else is asked for. Your avatar is generated from your account, so no photo is stored.

Analytics

If you accept analytics cookies, the site loads Google Analytics to count which pages and layouts are used. It records the pages you visit, the layouts you open, what you do with them (copying, opening in an agent, saving) and whether you signed up or signed in, where you arrived from, your approximate location (country and city), and your browser and device. Google does not store your IP address in Analytics, and nothing is linked to your account.

It sets cookies named _ga that last up to two years. Nothing is loaded, and no cookie is set, until you press Accept; declining is one press. You can change your mind at any time with the Cookies link at the bottom of every page, which also removes the cookies.

Why, and on what basis

• Running your account means signing you in, letting you copy prompts and keeping your saved layouts. This is the service you asked for, and providing it is the basis for using your data.
• The weekly digest is sent only with your consent, which you give and take back with the switch on your profile.
• Analytics runs only with your consent, given and withdrawn with the cookie banner.
• Server logs are kept because we have a legitimate interest in keeping the site working and secure.

Your data is never sold, used for advertising, or used to profile you.

Cookies

• Sign-in cookies, set when you sign in and removed when you sign out. They are strictly necessary for the account to work, so they are not asked about.
• Analytics cookies (_ga), only if you accept them. See Analytics above.

Your answer to the cookie banner is kept in your browser's own storage, not in a cookie, and never sent anywhere. There are no advertising cookies.

Who handles it

• Supabase stores accounts and saved layouts, and sends the sign-in codes.
• Vercel hosts the site.
• Google, for Analytics, only if you accept it.
• Google or GitHub, only if you choose to sign in with them.

Each handles the data only to provide its part of the service. Some of it may be processed outside the EU and EEA, including in the United States; where it is, it is covered by the EU–US Data Privacy Framework or the standard contractual clauses in their data processing terms.

How long it is kept

Account data is kept for as long as you have an account. Delete it from your profile and your email address, name, digest choice and saved layouts are removed immediately. Analytics data is kept by Google for 14 months, then deleted. Server logs are kept only briefly, then deleted by the host.

Your rights

You can ask to see the data held about you, have it corrected or deleted, receive a copy of it, or object to or limit how it is used. Changing your name, turning the digest off and deleting your account can all be done yourself on your profile; for anything else, email hello@layout.im. If you think your data has been mishandled, you can also complain to the data protection authority where you live.

Children

Layout is not meant for anyone under 16, and does not knowingly hold data about them.

Changes

If what is collected or who handles it changes, this page changes first, with a new date at the top.