Privacy Policy

Last updated: March 2026

This policy explains what data Yea.io ("the Service") collects, how we use it, and your rights. We keep things simple: we collect what's needed to run the service and nothing more.

What We Collect

• Email address: used for authentication (magic link login) and account-related communications.
• Files you upload: the content you sync to Yea.io, including images, documents, and other files.
• Account information: your username, display name, bio, and links that you set in your profile.
• Basic usage data: server logs that may include IP addresses, request timestamps, and user agent strings. We don't use analytics trackers.

How We Use Your Data

• To provide the Service: storing your files, serving your portfolio page, syncing between your devices.
• To authenticate you: sending magic link emails when you log in.
• To communicate with you: account-related notices (not marketing spam).

Where Your Data Lives

Your files are stored in Cloudflare R2 (object storage). Account metadata is stored in Cloudflare D1 (database). Both are hosted on Cloudflare's global infrastructure. The application itself runs on Cloudflare Workers.

Third-Party Services

We use a small number of third-party services to operate Yea.io:

• Cloudflare: hosting, file storage (R2), database (D1), and CDN.
• Resend: email delivery for magic link authentication emails.

We don't use third-party analytics, advertising, or tracking services.

Data Sharing

We don't sell your data. We don't share your personal information with third parties except the service providers listed above (who process data on our behalf to operate the Service), or when required by law.

Files you mark as public are, by design, publicly accessible on your portfolio page. Private files (prefixed with _) are not publicly accessible.

Your Rights

• Access: your files are always on your local machine (that's how sync works). You can also export via the CLI.
• Deletion: you can delete individual files or your entire account from the dashboard. Account deletion removes all your data from our servers.
• Correction: you can update your profile information at any time from the dashboard.

Cookies

We use a single cookie: yea_session. It's an HttpOnly cookie used for web authentication. No tracking cookies, no third-party cookies. That's it.

Data Retention

Your files are kept on our servers until you delete them or delete your account. Server logs are retained for a limited period for operational purposes. When you delete your account, we remove your files and personal data from our systems.

Children's Privacy

Yea.io is not directed at children under 13. We don't knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us and we'll remove it.

Changes to This Policy

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top. For significant changes, we'll make reasonable efforts to notify you.

Contact

Questions about your privacy? Reach out at hello@yea.io.