Privacy policy
Last updated 9 October 2026
In short
- We collect as little as we can: your sign-in details if you make an account, the websites you read, and short-lived records that keep the free service fair.
- No advertising, no tracking cookies, and we never sell your data.
- You can delete your account, with every board in it, at any time from your account page.
Who we are
Brandgrabit is run from the United Kingdom. We decide how your personal data is used, which makes us the “controller” under UK data protection law.
To ask anything about your data, use the contact form.
What we collect and why
Your account, if you make one
You sign in with Google or GitHub. They send us your email address, your name and a link to your profile picture. Our sign-in provider, Supabase, also keeps a security record of each sign-in, including the IP address it came from. We use this to give you an account, keep it secure and show you your boards. Our legal basis is providing the service you asked for.
The websites you read
A board holds the address you pasted and what we found on that public page: logos, colours, fonts, styles, the page title and screenshots. Public pages can include people's names or photos, for example on a portfolio. We keep boards so you can use them. Our legal basis is providing the service; for boards made without an account, it is our legitimate interest in letting people try Brandgrabit freely.
Fair-use records
To enforce the daily limits (5 boards without an account, 20 signed in) and protect the free service from abuse, we record each read with a scrambled form of your IP address (a salted hash we cannot turn back into the address) and your account, if you have one. After 2 days we wipe both, keeping only the time of the read, for up to 31 days. Our legal basis is our legitimate interest in keeping the service available to everyone.
Downloads
When you download a file from one of your boards, we record which file and when, linked to your account. This tells us whether Brandgrabit is useful. Our legal basis is our legitimate interest in improving it.
Messages you send us
If you use the contact or feedback form, we keep your name, email address and message so we can reply. Feedback you choose to make public may be shown on our feedback page, without your email address. Our legal basis is your request, and our legitimate interest in answering and improving the service.
Error reports
When something breaks, Sentry records a technical report: the page, your browser and device type, and what went wrong. We have switched off the collection of IP addresses, cookies and other identifying details in these reports. Our legal basis is our legitimate interest in fixing faults.
Page views
Vercel Web Analytics counts page views without cookies. It recognises a visit for one day using a scrambled value that is then discarded, and gives us totals, never individual people.
Server logs
Our host, Vercel, keeps a short log of requests to the site, including IP addresses, for about an hour, to run and protect the site.
Data outside the UK
Some of these companies are based in the US, so data can be handled there. When it is, the transfer is covered by the UK–US data bridge or by the UK's approved contract terms for international transfers.
How long we keep it
| Data | Kept for |
|---|---|
| Your account and its boards | Until you delete them, or your account |
| Boards made without an account | 30 days, then deleted with their screenshots |
| Fair-use records | Identifying details 2 days; the bare time of a read 31 days |
| Download records | 13 months, or until you delete your account |
| Messages to us | 13 months; published feedback while it is shown |
| Error reports | Up to 90 days |
| Server logs | About an hour |
Your rights
You can ask to see the personal data we hold about you, correct it, delete it, have it in a portable form, or object to or limit how we use it.
- Delete everything yourself: your account page deletes your account, your boards, their screenshots and your download records at once.
- Take your boards with you: each board downloads as CSS, a Tailwind theme, design tokens, a shadcn/ui theme and DESIGN.md.
- Anything else: use the contact form. We reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would like the chance to put it right first.
If your website was read
Brandgrabit reads public web pages that people paste in, much as a visitor's browser would. If a board shows your website or your personal details and you want it removed, use the contact form with the board's address and we will take it down.
Children
Brandgrabit is not meant for children under 13, and we do not knowingly collect their data. If you think a child has made an account, tell us and we will delete it.
Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use data you have already given us, we will say so on the site before it takes effect.