What we collect.

We collect your email, display name, studio URL (slug), currency, timezone, and brand settings — the things you enter during onboarding and in /dashboard/settings. We store these to render your portfolio and operate your studio. We store nothing you don't tell us.

When someone clicks a /m/<token> URL you sent, we log: the time of the open, an approximate IP (from the proxy headers), a short user-agent string, and the referring URL (if the browser provides one). This is shown to you as analytics (opens, devices, dwell time). We do not share this with anyone.

The raw tokens we issue are never stored — only a SHA-256 hash. If the database is leaked, an attacker cannot recover working URLs from the hash alone.

You can delete your profile and all related data (portfolio tracks, magic links, analytics) by emailing privacy@skitza.app — we'll comply within 7 days. A self-serve delete button lands soon.