Security at HTMLRadar

Updated 25 October 2026

You decide who can open each page. Here is how we protect it.

Where your data lives

Accounts, sign-in and reading history are stored with Supabase in Mumbai, India. Pages and attached files are stored in Cloudflare R2 and delivered through Cloudflare’s network.

Encryption

All traffic to and from HTMLRadar is encrypted with TLS. Data is encrypted at rest by our infrastructure providers. Link passwords, one-time codes and API keys are stored only as one-way hashes.

Who can open your page

You decide for every link. A reader can be asked to prove their e-mail address with a one-time code. A link can be limited to addresses at the companies you name, protected with a password, or set to expire. You can switch any link off at any time. What is recorded about readers is listed in the privacy policy.

Accounts and access

Account holders sign in with Google, Microsoft or a link sent to their e-mail. Every request is checked on our servers, and row-level security in the database keeps each account’s data apart from every other account. Production access is restricted to authorised staff and limited to what running and supporting the service requires.

Backups

The database is backed up every night. Backups are encrypted and kept for 14 days. A second encrypted copy is stored separately.

Deleting your data

You can delete a page or switch off a link at any time. For permanent deletion of an account and its data, write to privacy@htmlradar.com. Verified requests are completed within 30 days.

Compliance

We do not currently hold a SOC 2 report or ISO 27001 certification. Enterprise customers receive a data processing agreement and help with their security review, and we answer security questionnaires on request.

Providers and data use

Our privacy policy lists every provider that processes personal data. We do not sell personal data, and we do not use your pages to train AI models.

If something goes wrong

If an incident affects your data, we tell you without undue delay.

Contact

Send security reports to security@htmlradar.com. We read every report and reply. We do not run a paid bug bounty. For a security review or a questionnaire, write to hello@htmlradar.com.