Privacy notice
Operated by world of creator, United States. Contact: zhang.chen@worldofcreator.com.
What the current site does
PODIE lets you browse and try UI components without an account. The current site has no checkout or advertising integration. We use Google Analytics 4 through Google Tag Manager for website usage analytics, as described below.
Requests and hosting
Cloudflare provides hosting, network delivery, storage, and security services. Serving a request can involve technical information such as an IP address, requested URL, time, and browser or network details. This information may be processed to deliver the site, detect abuse, and diagnose failures. See Cloudflare’s privacy policy for its own processing practices.
The application database and object storage hold component files, source metadata, license information, update-check records, and the account and session records described below.
Google sign-in and your account
Browsing and previews are public. Copy buttons ask you to sign in with Google. With your consent, Google shares a stable Google account identifier, verified email address, display name and profile photo URL. We store these basic account details in Cloudflare D1 to recognize you on later visits. We do not receive your Google password, request access to Gmail or Drive, or retain Google access or refresh tokens.
A secure, HttpOnly, same-site cookie holds a random PODIE session token for up to 30 days. The database stores a hash of that token, not the token itself. A separate, short-lived cookie and server record protect the sign-in redirect and expire after 10 minutes; the record is consumed once. Expired session records are removed during sign-in. Logging out revokes the current session. Your account profile is retained until you request deletion or it is no longer needed to provide the service. Contact the operator to request access, correction or account deletion. Google handles its own sign-in under Google’s privacy policy.
Website analytics
Cloudflare Web Analytics is enabled for this domain to measure aggregate traffic and page performance. Its browser beacon reports performance measurements to Cloudflare. See Cloudflare Web Analytics for the service description.
Public pages load Google Tag Manager and Google Analytics 4. The Google tag measures page visits, browser-history navigation, searches, scrolling, outbound links and downloads according to the published container settings. These events can include page URLs, page titles, referring pages, search terms, browser and device information, and generated visitor and session identifiers. Do not put confidential information into public URLs or search queries. Loading the tag and sending events also exposes normal request information to Google.
PODIE records clicks on its buttons, links, tabs and menus, plus separate outcomes such as successful or failed copying, starting and completing sign-in, opening editor connections and copying editor setup instructions. Component events include public catalog IDs, titles, sources, categories, selected package managers and visible detail-page engagement time. Click events use action IDs and public paths rather than account names, email addresses, input values or clipboard contents. Isolated demo frames are excluded from these platform events. A click, download or copied command does not prove an installation completed.
PODIE does not send account identity, source code, selected files, copied text, prompts or model answers in its custom analytics events. Advertising storage, advertising user-data consent and ad personalization are disabled by this integration. Google Analytics uses first-party cookies for visitor and session measurement. See Google’s privacy policy and Google’s Analytics opt-out information. We do not promise a server-side analytics retention period that has not been verified for this property.
Browser-only interactions
The welcome screen uses your browser’s language setting. The light/dark theme uses your device’s local time by default; an explicit theme choice is stored in this browser. These checks run in your browser and do not request your precise location. Choosing a package manager and interacting with a demo do not create an account or submit a form to PODIE.
File-picker demos operate on files selected in your browser; PODIE does not provide a server upload endpoint for those demos. Demo selections and text are not submitted to the application backend. Clicking Copy writes the selected public component instructions, command or code to your clipboard; PODIE does not read the clipboard as part of that action.
The full-site framework demos can save projects and preferences in this browser. Their assistant replies are local examples, not calls to an AI provider. Clear this site’s browser storage to remove locally saved projects.
PODIE editor connections
Connecting PODIE to Codex or Claude Code creates an account-scoped token for the selected editor. Only its hash is stored. It expires after 30 days and can be replaced or disconnected from Connect PODIE. We record successful tool-call counts and times by editor and tool name to show whether the connection works. These records contain no request text and remain associated with your account until deletion. Replacing a token resets its connection confirmation but preserves historical counts.
Catalog search and installation tools return public component information. If your editor uses model-assisted recommendations, the design brief it sends and public catalog metadata are passed through Vercel AI Gateway to OpenAI. We do not send your Google email, Google tokens or repository source. Request text and model answers are not stored in the application database or browser analytics. Avoid sending confidential information. PODIE does not send model-usage telemetry to a separate tracking service.
Your coding assistant controls local project access and changes. Receiving an installation plan does not prove that a component has been installed. You can disconnect each editor independently.
With your permission, your editor can request a tracked installation plan and report type, build and runtime checks or your explicit acceptance. Tracking is off by default. A receipt stores the public item ID, source-manifest digest, package manager, editor, dates and fixed outcome or failure codes; it never accepts project paths, source code or build logs. These results are labeled client-reported and are not independently verified by PODIE. Receipts expire for updates after 30 days and remain in your account history until account deletion. Disconnecting stops future tool access; contact the operator to delete history.
Cookies and external services
Some original demos may load images, fonts, or rendering libraries from third-party hosts. Your browser sends normal request information to those hosts when the demo runs. Original demos run in isolated previews; source and dependency information are available on the component page.
Google Analytics can set first-party analytics cookies, including cookies beginning with _ga. Cloudflare may process request information or use security mechanisms when needed to protect the service. Following an external link or running an installation command can connect you to upstream documentation, package registries, or CLI providers governed by their own policies.
Contact and retention
If you contact the operator, the information you choose to provide is used to respond and resolve the inquiry. It should be kept only as needed for that purpose and applicable obligations. Technical logs are subject to the hosting platform’s retention settings and service terms; this notice does not promise a retention duration that has not been verified for the relevant log type.
Your choices
You may avoid optional demo inputs and external links. Your browser’s tracking protection or content-blocking controls can block Google analytics scripts and requests. You can clear this site’s cookies and browser storage to remove locally stored analytics identifiers; allowing analytics on a later visit can create new identifiers. Depending on the law that applies to you, you may have rights to request access, correction, deletion, restriction, or an objection to processing. Contact the operator identified above to make a request or raise a concern; requests will be assessed under the applicable requirements.
Updates
This notice describes the current implementation. It will be revised when the site’s data-handling practices change.
Last updated: .