Privacy policy

Last updated: March 21, 2026

WhipNode is operated by Square Post Labs, 201 King St, London, Ontario N6A 1C9, Canada. This policy describes what data we collect, how we use it, and how long we keep it.

What we collect

Uploaded content

  • Files you upload (stored in Cloudflare R2)
  • Optional note text you provide
  • OCR text extracted from uploaded images/PDFs
  • Derived format outputs (JSON, Markdown, YAML, TXT, prompt pack)

All uploaded content is deleted permanently when the upload expires (default 24 hours). Deletion from storage occurs within 15 minutes of expiration.

Metadata

  • Item ID, timestamps, status, file count, total bytes, MIME types
  • Source type (browser or agent) and origin identifier
  • Hashed IP address and user agent — one-way hashed for rate limiting. We never store your raw IP address.

Analytics

  • Page views, upload events, format usage, feature engagement
  • Collected with anonymous identifiers
  • No file content, OCR text, note text, or filenames are sent to analytics
  • No cross-site tracking, no advertising data

Cookies

  • Essential: Cookie consent preference (wn_consent)
  • Analytics: Anonymous session identifier — no PII, tracks only usage patterns

What we do NOT collect

  • We do not collect personal information unless you create an account (future feature)
  • We do not read, analyze, or train on your uploaded files
  • We do not sell data to third parties
  • We do not serve ads
  • We do not track you across websites

Third-party processors

We use third-party services for infrastructure and hosting, OCR and content moderation, anonymous product analytics, and error tracking. No file content, OCR text, or notes are shared with analytics or error tracking providers. Image files are sent to our OCR and moderation provider for processing only and are not retained by the provider.

Data retention

  • Uploaded files: Deleted at expiration (default 24h)
  • Derived outputs: Deleted with the parent item
  • Item metadata: Tombstone records (ID, timestamps, status) may be retained for abuse prevention
  • Analytics: Retained per our analytics provider's data retention policy

Your rights

Since uploads are anonymous and auto-deleted, there is generally no personal data to request deletion of. If you believe we hold data about you, contact us and we will investigate.

Self-hosting

WhipNode Core is open source (AGPL-3.0). When self-hosting, you control all data storage and can choose which third-party services to enable or disable. This privacy policy applies only to the hosted service at whipnode.com.

Changes

We may update this policy at any time. Changes take effect when posted. We will update the "last updated" date above.

Contact

Privacy questions: [email protected]