YOUR CONTEXT, WITH CARE

Privacy & data flow.

NoteSprig collects website feedback for the workspace that installed its widget. This page describes the application’s implemented data flow. The deployment owner must add their business identity, support contact, and applicable privacy terms before inviting real users.

What a report contains

A report contains the note you enter, its pin coordinates, page URL, browser, operating system, viewport size, timestamps, and an optional reporter name. The embedded widget omits URL query strings and fragments. Notes can still contain personal information, so include only what is necessary to explain the issue.

A screenshot is optional. You can choose a PNG or JPEG, or use the browser’s screen-sharing prompt where supported. Capture requires the browser’s permission. The screenshot stays in the form until you review it, confirm that you want to attach it, and send the report. Check for names, messages, credentials, and other private information before confirming.

Where the information goes

In the supplied Cloudflare deployment, project records, notes, workspace permissions, and access records are stored in D1. Uploaded screenshots are stored in a private R2 bucket. Screenshot downloads require an authorized workspace session. Reports and screenshots are not published on public pages.

During local development, Wrangler stores local database and object-storage data on the development machine. The synthetic example project contains fictional information. Deploying the app does not move local development records into a hosted database.

Workspace and guest access

Workspace access uses an access key and an HTTP-only session cookie. The cookie supports authentication; it is not used for advertising. Members receive owner, editor, or viewer permissions. Guest widget tokens allow collection for a specific project and hostname; they do not grant access to the project dashboard or its existing reports.

Access-key and guest-token hashes are stored instead of their original secrets. Owners can revoke access. The app checks expiry, project scope, and the requesting hostname before accepting guest feedback.

Retention, export, and deletion

Retention defaults to keeping reports until the workspace owner changes the setting or deletes them. Owners can choose 30, 90, or 365 days of report retention. Scheduled cleanup applies the selected setting. Unattached screenshot uploads are removed after 24 hours. Deleting a project removes its related records and requests deletion of its screenshot objects; storage failures are retried by the scheduled cleanup. Project deletion is a separate owner action.

Workspace owners can export records as CSV or JSON. Treat downloaded exports as private files. JSON backups contain report records and object references; screenshot image files are not embedded in the backup. Copies you download are outside the application’s retention controls.

Analytics and infrastructure

The application includes no analytics trackers, advertising scripts, or email service. Fonts are served with the app. The widget sends reports and optional screenshots only to the configured NoteSprig application origin. Infrastructure providers process requests needed to serve the application and may maintain their own operational records under the deployment owner’s account settings.

Questions or requests

A support contact is not configured in this starter. Contact the person or organization that supplied your review session or workspace access. The deployment owner must publish an accurate contact route before public launch.