Privacy Policy
Web Editor app · last updated 23 September 2026
Web Editor is a pass-through, not an archive. A request is created on a page element, goes to your own agent and is gone. You create no account with us, the app runs no analytics, and nothing from the page you are viewing leaves your device on its own.
In short. The content of the pages you browse stays on your device. The only way anything leaves the app for our server is the remote MCP relay — and you are the one who switches it on. Leave it off and we receive nothing.
Who controls the data
The Web Editor app is published, and the data controlled, by Daniel Hromada, a sole trader established in the Czech Republic. Address: Prosečnice 2, 257 42 Krhanice, Czech Republic. Contact: info@indigostudio.cz.
What stays on your device
The app is a browser. It keeps the following locally, and we cannot see any of it:
- the sites you add, their addresses and recently opened pages
- draft requests and lists, until you send them
- attachments and screen crops you attach yourself
- logins and cookies of the sites you open — kept separately per site; forget site deletes them with it
- app settings, including the key that addresses your request list
Deleting the app removes all of the above.
What leaves, and only when you do it
Clipboard, zip and share
A request goes wherever you send it — your agent's app, mail, a file. We are not part of that and no copy reaches us. What your agent does with the request is governed by that provider's terms, not ours.
Remote MCP (relay)
Off by default. When you turn on Send requests in the Connections section, the following — and nothing else — goes to our server (a Cloudflare Worker at mcp.webeditor.click):
- the request text you typed or dictated
- the address and title of the page the request was made on
- the anchor, selector and context of the selected element
- a downscaled screen crop, if you attached one to the request
No account is created. The list is addressed by a key generated on your device; anyone who knows the key can reach the list, so treat the address as a secret.
How long we keep it. The whole list disappears one week after the last write. An attached crop is deleted once the agent fetches it, and with the list at the latest. Turning the switch off first deletes what is held on our side, and only then stops sending.
What we do not do with it. We do not read it, do not learn from it, do not pass it on and do not combine it with anything else. The content does not end up in logs or statistics; we measure counts and sizes, not what the request says.
The server runs on Cloudflare, acting as our processor, which sees the technical details of the connection — IP address, time and request size. We do not build a profile from them.
Microphone and dictation
You start dictation yourself. Transcription runs on the device using the system speech recogniser; audio is not stored and is not sent to us or to anyone else. Only the text remains, visible in the sentence and editable by you.
Photos
We touch your photo library only at the moment you attach your latest screenshot, and only for that image. Nothing else is read, and the image stays on the device until you send the request.
What the app does not have
- no accounts, no sign-up, no login with us
- no analytics, no third-party SDKs, no advertising identifiers
- no selling or sharing of data with third parties
- no inference on our account — you pay your own agent for the model
- no git integration and no access to your website's source code
Payments
The app is purchased through the App Store. Apple handles the payment under its own terms; your payment details never reach us and we do not see them.
Children
Web Editor is a tool for working on websites and is not directed at children. We do not knowingly collect data about children.
Your rights
Until you send a request, we hold nothing about you — there is nothing to access and nothing to delete. When you do use the relay:
- withdraw consent — turn off Send requests; this deletes what is held on our side
- delete sooner — write to info@indigostudio.cz and we will delete the list; do not put the full address with the key in the message
- complain — you may lodge a complaint with the Czech Data Protection Authority (uoou.gov.cz) or your local supervisory authority
The legal basis for sending requests through the relay is your consent; without it nothing is sent and the app keeps working through the clipboard.
Changes
If this policy changes, the date above changes with it. A substantive change — above all, anything that would start leaving the device that stays on it today — is stated in the app before it happens.