Privacy Policy
Last updated: October 9, 2026
1. Who we are
ReleaseBadge is operated by Divyesh Patel,. Questions about this policy: support@releasebadge.com.
2. What we collect
- Account information: your email address, your name if you provide it, and your profile photo if you sign in with Google. Sign-in is handled by Google Firebase Authentication; we never see or store your password.
- Content you create: changelog entries and your widget settings, including authorized domains.
- Usage data: counts of widget loads and entry views, used to show you analytics and to apply plan limits.
- Technical data: IP address and basic request details, used for security and rate limiting.
- Billing data: payments are handled by Paddle, our Merchant of Record. We receive your subscription status and Paddle customer and subscription identifiers. We never receive or store your card number.
3. Visitors who see a widget on a customer's website
When our widget loads on a website, it fetches that site's changelog from our servers. We record aggregate counts (loads, opens, entry views) for the site owner. We do not build profiles of visitors, and the widget does not set tracking cookies. Visitor IP addresses are used only for rate limiting and abuse prevention. Site owners are responsible for any privacy disclosures their own websites require.
4. How we use your data
- To provide, secure and improve the service
- To authenticate you and keep you signed in
- To apply plan limits and show analytics
- To process payments through Paddle
- To respond to support requests
- To comply with legal obligations
5. Cookies
We use one essential cookie to keep you signed in (an HTTP-only session cookie that lasts up to 5 days). Firebase also stores your sign-in state in your browser's storage. We do not use advertising or analytics cookies.
6. Service providers
We share data only with providers that help us run the service:
- Google Firebase — authentication
- Neon — database hosting
- Cloudflare — hosting, DNS and support email routing
- Paddle — payment processing and Merchant of Record
Your data may be processed in countries other than your own. We do not sell personal data.
7. Retention
We keep your account data while your account is active. If you ask us to delete your account, we delete your account record and changelog content. Rate-limiting records containing IP addresses are kept only as long as needed for abuse prevention. Paddle retains billing records as required by law.
8. Your rights
You can ask us to access, correct, export or delete your personal data, or object to how we use it. You can export your changelog from the dashboard at any time. Email support@releasebadge.com and we will respond within 30 days. Depending on where you live, you may also have the right to complain to your local data protection authority.
9. Security
We use HTTPS, HTTP-only session cookies and per-account access controls. No system is perfectly secure, but we work to protect your data.
10. Children
ReleaseBadge is not directed to children under 16, and we do not knowingly collect their data.
11. Changes
If we make material changes, we will update the date above and, where appropriate, notify you by email.