Privacy

Last updated October 9, 2026

BigLift collects as little as it can. You can use the builder without an account, and we don't run advertising or analytics trackers. This page explains what we do keep.

Without an account

• Your current build and your light/dark choice are saved in your own browser (local storage). They never leave your device unless you share or save a build.
• When you follow a link to a store, we count the click: which part and which store, and when. Nothing about who clicked is stored with it. The counts tell us which stores matter to shoppers.
• We count page views with Cloudflare Web Analytics, which uses no cookies and no fingerprinting; it tells us which pages are read and roughly where visitors come from, not who they are.
• Like any website, our servers see your IP address and browser details with each request. We use them to run the site, limit abuse (rate limiting) and investigate errors; request logs are kept briefly by our hosting provider and are not used to profile you.

With an account

• Email address and an optional name, to sign you in and send account emails (confirming your address, resetting your password).
• Your password, stored only as a one-way hash; we can't read it.
• If you sign in with Google or Apple: your name, email address and (Google) profile picture from that account, and an identifier that links it to your BigLift account. We don't get your password or access to anything else in your Google or Apple account.
• Sessions: a sign-in cookie in your browser, and on our side the session's expiry, IP address and browser, so sessions can be secured and signed out.
• Saved builds: the parts and names of builds you save. They're private to your account unless you share a link to one.

We don't sell or rent your information, and we don't use it for advertising.

Cookies

BigLift sets one cookie, the sign-in session cookie, and only when you sign in. It's needed for the site to work, so there's nothing to opt into. When you follow a link to a store, that store's own site may set its own cookies, including affiliate cookies that tell it the visit came from BigLift; their privacy policies apply there.

Services that process data for us

• Cloudflare hosts and serves the website and provides our domain's DNS and email forwarding, and Fly.io runs our API (servers in the United States).
• Neon hosts our database (United States).
• Resend sends account emails.
• Sentry receives error reports when something breaks, such as the page, browser and error details. We strip cookies and sign-in headers before reports leave our servers.

How long we keep it

Account data and saved builds are kept until you delete them or ask us to delete your account. Sign-in sessions expire after a period of inactivity. Error reports and request logs are kept for a short time by the services above, under their retention settings.

Your choices and rights

On your Account page you can change your name and email, download a copy of your data, delete saved builds, and delete your account with everything in it (we email you a link to confirm). You can also email hello@biglift.app from your account's address for any of this; we'll do it within 30 days. Depending on where you live (for example the EU, UK or California), you may have further rights under local law, and we'll honour them.

Children

BigLift isn't aimed at children under 13, and we don't knowingly collect their information.

Changes

If we change how we handle data, we'll update this page and the date above, and tell account holders by email about significant changes.

Contact

Questions about privacy: hello@biglift.app.