Designly is a library of website design references at designly.sh. This page explains what we collect when you use it, why, who helps us run it, and what you can ask us to do with your information. Questions go to hello@designly.sh.
The short version
- You can browse the library, its API and its MCP server without an account.
- We use ClickClacks for privacy-friendly analytics. It sets no cookies, and we have switched off IP collection, click capture, session replay and heatmaps.
- An account holds your email address, your sign-in methods and your Boards. You can export or delete it from your account settings.
- We don't sell personal information or use it for advertising.
What we collect
When you browse
Our hosting provider, Cloudflare, handles every request. To keep the service up and to enforce fair-use limits (60 requests a minute per IP address for the API and MCP server), requests are counted by IP address for a short window. We don't keep those counts afterwards.
Analytics
We measure how the site is used with ClickClacks, a cookieless analytics service. Its script stores a random visitor identifier in your browser's local storage (no expiry) and a session identifier in session storage (30 minutes), along with a few small working values. It records the pages you view with the address cleaned (only utm_ campaign tags are kept, and email addresses and tokens are removed), the referring site, your country (from Cloudflare's network, not from your IP address), and your browser, operating system and device type in reduced form.
We have turned off ClickClacks' optional features: your IP address is not stored, and there is no click capture, session replay or heatmap. ClickClacks honours Global Privacy Control: if your browser sends it, nothing is recorded. It does not act on Do Not Track. Analytics data is kept for up to 24 months, then archived for 3 months, then deleted.
When you create an account
We keep your email address and name, how you sign in (a passkey's public key, a hashed password if you set one, two-factor settings and backup codes, which are stored hashed), and your active sessions with the device and browser they came from so you can review and end them. A session cookie keeps you signed in; it is necessary for the account to work. We also keep the Boards you make and what you save to them.
When you submit a site or ask for one to be removed
We keep the address you sent, your email address, and anything you wrote in the form, so an Editor can review it and tell you the outcome. Forms are protected by Cloudflare Turnstile, which checks your browser for signs of automation.
We send sign-in links and codes, updates about your Submissions, and, only if you choose to receive them, occasional picks from the library. Every email that isn't about your account has an unsubscribe link, and you can manage these in your account settings.
Websites in the library
The library shows screenshots of public websites, with their design details and a link to the business. We capture only public pages and respect each site's robots.txt. If you own or represent a site and want it removed, use the removal form; requests from an email at the site's own domain are handled within 2 working days.
Why we use it
- To provide the library, your account and your Boards (performing our agreement with you).
- To keep the service secure, stop abuse and enforce fair use (our legitimate interest in running a reliable service).
- To understand which parts of Designly are useful, in aggregate (our legitimate interest in improving it).
- To send optional emails, only with your consent, which you can withdraw at any time.
Who helps us run Designly
| Provider | What they do | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, file storage, email delivery, Turnstile, screenshot capture, and an AI model that drafts descriptions of the websites in the library (never of you) | Cloudflare's global network |
| ClickClacks (K3 Technologies, Las Vegas, NV) | Website analytics, as described above | Cloudflare, and ClickHouse hosted by DigitalOcean in New York (USA) |
Some of this processing happens in the United States. Where the law requires it, transfers rely on the providers' standard contractual clauses.
How long we keep it
- Account information: while your account exists. When you delete it, it goes after a short grace period in which you can change your mind.
- Submissions and removal requests: as long as needed to handle them and keep a record of the decision.
- Analytics: as described above.
Your choices and rights
From your account settings you can download a copy of your data and delete your account. You can also email hello@designly.sh to ask for access, correction, deletion or a copy of your information, or to object to how we use it. Depending on where you live (for example the EU, the UK or California), you have these rights by law, and you can complain to your local data protection authority. We will never treat you differently for using them.
Children
Designly is not meant for children under 16, and we don't knowingly create accounts for them.
Changes
If we change this policy, we'll update the date at the top, and we'll email account holders about any significant change before it takes effect.