Privacy Policy
This page explains what Layoutline collects, why we collect it, and who else receives it. It is written in plain language.
Who we are
Layoutline is a web product that gives coding agents landing-page layouts to pick, compose, and check through an MCP server and a maker dashboard. It is operated by an independent developer based in Vietnam, who is the controller of the data described here. Contact: [email protected].
Account data
When you create an account we process your email address and the name you choose to show. We use that data to authenticate you, operate your account, send necessary service messages, and respond to support requests.
Content you submit
You and your agents may submit product and audience descriptions, copy briefs, layout choices, screenshots for review, project identifiers, and related tool inputs. We process that content to run the layout tools, store your picks and plans for your account, issue and manage API keys you request, and show you usage history. That content stays in your account until you delete it or delete the account.
Third-party processors we actually use
One recipient, and only on this marketing site: PostHog (product analytics). It receives the name of an event — for example, that a visitor clicked Add the MCP server — with a random identifier created in memory for that page load, and the network metadata any web request carries, including your IP address. It never receives your email address, your name, or anything you type into a form. Nothing in the signed-in product sends events to it.
Everything else runs on infrastructure we operate; no third party receives your data through it.
International transfers
Where the data physically sits: United States (Northern Virginia). If you use Layoutline from outside the United States, your data is transferred to the United States. Where a recipient is covered by an adequacy decision, that is the basis for the transfer; otherwise we rely on Standard Contractual Clauses. The exact basis for each processor is available on request so this page does not go stale as certifications change.
Cookies
This marketing site sets no cookies. Analytics events are counted without a device-persisted identifier, so there is no consent banner on these pages. We store nothing non-essential on your device from this landing. Inside the signed-in product, your session token is held in the page's memory for as long as the tab is open — it is not written to a cookie, localStorage or sessionStorage, so closing the tab ends the session.
Analytics on this site
Optional product analytics may send anonymous event names (for example, that a visitor clicked Add the MCP server) with a random identifier created in memory for that page load only. We do not write that identifier to cookies, localStorage, or sessionStorage on this landing.
How long we keep data
Account and content data are kept while your account is active. If you delete your account, we delete associated product content as described in our product rules. Records needed for security or legal compliance may be retained longer where the law requires it.
Your choices
You can update your display name in the product, revoke API keys you issued, and request account deletion. For privacy questions or requests, email [email protected].
Changes
If this policy changes in a material way, we will update the effective date on this page.