Trust
Last updated: July 11, 2026
Your website is yours. Your data is yours. Your domain is yours. We are a thin layer between your files and your visitors, and every decision below is made to keep it that way, even if we disappeared tomorrow.
Every claim on this page is measurable on our live durability page: total sites backed up, latest restore-test outcome, and your own account's backup state if you are signed in.
Where your data lives
Your files
Kept with Cloudflare, the same company a large share of the world's biggest websites rely on. Files uploaded from the EU are stored in the EU, and served to your visitors from whichever Cloudflare location is closest to them, for speed.
A second copy in your own Google Drive
Every time you publish a new version, we also save the files to a WhatImade folder inside your own Google Drive. You can open it, download it, or revoke our access any time from your Google account. We request the narrowest possible permission (drive.file), which only lets us read files we created ourselves. We cannot see, list, or touch anything else in your Drive.
A compressed archive copy, ours to hold
We also keep a single compressed copy of your current site at Cloudflare, refreshed on every publish. You can download it as a zip (a folder bundled into one downloadable file) from the dashboard at any time. On the 1st of every month we pick one site at random, unpack its copy, and check the result still opens as a real webpage. The outcome is published on the durability page.
Your account and basic information about each site
Kept in a small database at Cloudflare: one entry per site, one entry each time you publish a new version, one entry each time a visitor loads one of your pages.
What keeps you signed in
A small, temporary record at Cloudflare that remembers your session. It clears itself after 7 days of you not using it, and we delete it immediately the moment you sign out.
Payment details (for the service fee and any domain purchase)
Handled entirely by Stripe, the payment processor most online shops use. Your card number is never seen by us. Attaching a custom domain carries a recurring annual service fee (first year free), which Stripe bills as a real subscription, not a one-off charge; a domain you buy through us is charged separately at cost. We only keep your subscription status (trial, active, cancelled) and renewal date so your dashboard shows it accurately, plus a reference number and amount for each transaction.
Who can see it
You, through the dashboard. Your site's visitors, when they open your site's address in their browser (unless you have password-protected it). Us, only when investigating a specific operational issue you have reported, or a specific abuse report. Every internal access is logged and auditable.
We do not train AI models on your content. We do not sell, rent, or share your data with advertisers or data brokers. We do not allow outside companies to scoop up your pages to train their own AI: the usual signal the big AI crawlers respect is set to "no" across every site we host, and our Terms of Service now prohibit bulk scraping outright.
On your Google Drive: we only ever write into the WhatImade folder we create. The permission we request (drive.file) does not let us read, list, or open anything else. If you revoke access, we lose the ability to write new backups, and your existing folder stays in your Drive untouched.
Domain names
Registered in your own name, not ours
Any domain you buy through us is registered with Cloudflare under your name, address, and email, from the billing details you provide at checkout. We do not register domains to ourselves and hand you a pointer; you are the registrant of record from the first day. If we ever disappeared, your domain stays with you, you can transfer it to any other registrar, and no step in that transfer depends on us.
How to delete your data
Delete one site
In your dashboard, open the site and choose Delete, then type the site's name to confirm. It goes offline straight away, with no email step to wait on. We also email you a one-click link so that if you change your mind, you can bring the site back exactly as it was any time in the next 7 days. After those 7 days, the files, version history, and backup copy we hold are removed.
The copy in your own Google Drive is not touched. The permission we hold does not let us delete from your Drive, and intentionally so. If you want that copy gone too, you delete the folder yourself from Drive.
Delete your entire account
Email support@whatimade.app from your registered address with "Delete my account" in the subject. We confirm within 24 hours and complete deletion within 30 days, per GDPR. All sites, all files, all records on our side. The Drive backups in your own Google account remain entirely yours.
Export your data before deleting
Three easy ways. One, download the current version of any site as a zip straight from the site's page in the dashboard. Two, open the folder in your own Google Drive; every published version is there. Three, Account → Download my data gives you a single JSON file with your profile and every site's metadata.
Third parties that see some of your data
We try to keep the list short. As of today:
- Cloudflare is the company whose network and storage we run on. They see every visit to every site, as any hosting company would. They are also our domain registrar and our email-sending provider's upstream DNS.
- Google Fonts provides the typefaces used on our own pages at whatimade.app. When those pages load, Google sees the visitor's approximate location, the same as any website using Google Fonts. Your own sites do not use Google Fonts unless you add them yourself.
- Google confirms it is really you when you use "Sign in with Google". If you connect Drive backup, Google also stores the files we upload into your own Drive; we do not send them anywhere else.
- Stripe handles the recurring annual service fee for custom domains and any domain purchase. Card details never touch our systems.
- Resend delivers transactional email such as delete-confirmation messages. They see your email address and the message body, which we keep short and factual.
What we do with law enforcement requests
We comply with valid legal orders issued by UK or EU courts. We do not voluntarily share data without a legal order. We publish a summary of requests we receive in an annual transparency report, starting in 2027.
We will challenge overbroad requests where we have standing. We will notify the affected user unless a gag order forbids it.
What happens if we are acquired or shut down
Your data does not transfer automatically. If we were ever sold or shut the service down, we commit to: (1) telling every user at least 60 days in advance, and (2) honouring deletion requests during the transition. Beyond those two commitments, two structural safeguards apply by design, without anything you need to do:
- The Google Drive backup in your own account continues to work regardless of what happens to us. The files are in your drive; our going away does not remove them.
- Any domain you bought through us was registered in your own name with Cloudflare from day one, so it stays with you. No consent from us is needed for you to transfer it elsewhere.
How we keep things safe
- Every page of every site we host loads over an encrypted connection, the same kind your bank uses. The padlock in the address bar is always on, always free.
- If you password-protect a site, the password is scrambled before being stored, using a technique that makes it extremely costly for anyone to guess, even with the database in hand.
- The private permission that lets us save copies to your Google Drive is locked with strong encryption before we ever store it. If we reset our master key, every saved permission stops working at once and everyone simply reconnects. No one else can use the old one.
- If you ever create a special access key for your own tools to talk to us, we do not keep the key itself. We keep a one-way scrambled copy. The full key is shown to you exactly once, at creation. If you lose it, you delete it and make a new one.
- Your sign-in is protected from the kinds of cross-site tricks attackers sometimes use against other websites. The browser is told to hand our sign-in token back to us and nobody else, only on our own address, only over the encrypted connection.
- When Stripe tells us a payment went through, we check the message is genuinely from Stripe before acting on it, and we refuse the same message twice.
- Every tool and form that acts on your account checks that the request really is from you. Customers cannot see or touch each other's data, and we test this regularly.
- We cap how many requests any one visitor, signed-in user, or access key can make per minute. This stops runaway scripts and stops anyone from hammering the service.
A narrow check on anonymous uploads
When someone uploads a site without making an account, we run one small automated check for obvious bad things: known viruses and pages that copy a familiar login screen in order to trick people into handing over their password. This is only to stop the free, no-account side of the service from being turned into a scam-page factory. If you have an account, your uploads are not scanned. More detail is in our Privacy Policy.
Who we are
WhatIMade is a trading name of G2G Advisory Ltd, registered in England & Wales. Our registered address and company number are available on request at support@whatimade.app.
Questions?
If anything on this page is unclear or you have specific concerns about how we handle your data, email support@whatimade.app. A human responds. We answer most emails within one business day. For live numbers on backup coverage and the latest restore-test outcome, see the durability page.