Privacy policy

How Twelvenode handles data in the builder. This describes how the service works today, in an early version.

You don’t need an account to try the builder. When you start building, a guest session is created in our database at Supabase (our database provider and data processor). It is linked to your browser by the tn_anon cookie; see Cookies.

What we store
Your projects and every version of them, a random session id and a one-way hash of your IP address. The hash is only used to limit abuse (at most a few guest sessions per hour) and can’t be turned back into the address.
Anonymous statistics
Simple events such as “project created”, linked to the session id. No free text, no third-party analytics.
Retention
Guest sessions, projects, versions and events are deleted automatically when the session is 7 days old.

If you create a free account, we store your email address at Supabase for signing in with an email link, plus your projects and versions. Your guest projects move to the account. We only send email related to signing in.

Account details and projects are kept for as long as you have the account. You can delete your account and all your projects, versions, share links and waitlist sign-ups yourself on the Account page. A guest session that moved to your account is then unlinked from it and removed by the automatic 7-day cleanup.

If you join the Pro or Agency waitlist on the Pricing page, we store your email address, the plan and a one-way hash of your IP address (to limit abuse). We only use it to tell you when the plan opens. No payment details are collected.

When someone reports a shared page, we store the link, an optional reason and a one-way hash of the reporter’s IP address. To make moderation possible, a report keeps the ids of the reported project and account even if the page is deleted.

Vercel
Hosting of the website and the server code.
Supabase
Database and sign-in (accounts, projects, versions, share links, waitlist).
xAI
Not used yet. When live generation opens, your instructions will be sent to xAI (USA) to generate your site; this page will be updated first.

Images you open in Studio’s Dither tool are processed in your browser. They are not uploaded to our server or stored anywhere, and they are gone when you close or reload the page.

All images and fonts on the pages are served from our own server, so your browser doesn’t contact any third party for them. We use no ad networks.

You have the right to know what data we hold about you, to have it corrected and to have it deleted. For a guest, it’s enough to tell us it concerns your browser and we’ll delete the session. You can also simply wait: it’s deleted after 7 days.

Anyone can send a request with the request form below, with or without an account, for example to remove a waitlist sign-up. We reply to the email address you give within 30 days. You can also complain to the Swedish Authority for Privacy Protection (IMY).

We keep the request, the email address you give and a one-way hash of your IP address (to limit abuse) until the request has been handled, and delete them after that.

Request

Last updated 24 October 2026.

Back to the home page