Privacy policy
Last updated: 5 November 2026
Summary
- We only need your email address to run your account.
- Websites you publish are public. That's the point of Webloyt.
- We check content with automated moderation before it goes live.
- No ads, no analytics trackers, and we don't sell your data.
Webloyt is a personal project run by Onur Taner (“we”). This policy explains what we collect when you use Webloyt through your AI assistant, when you visit webloyt.cloud, and when you visit a website hosted on Webloyt. The rules for using Webloyt are in our terms of use.
What we collect
Your account
When you connect your AI assistant to Webloyt, you sign in with Google. We receive your email address and Google's confirmation that you signed in. We store your email address together with the names of the websites you claim. We also store the sign-in tokens that keep your assistant connected.
What you publish
The files you or your AI publish: pages, stylesheets, images, audio, video, PDFs and fonts, plus the date and time they were changed. Published websites are public: anyone can see them, and search engines may index them.
File uploads
Files you upload through a one-time upload link are stored on your website like any other file. Camera metadata (EXIF, including the location where a photo was taken) is removed from JPEG and PNG photos before they are stored. Photos are also resized to web size (at most 2,000 pixels wide) with an 800-pixel version for galleries, so pages load fast.
Abuse reports
If you report a website, we store the website address, the reason you chose and the details you write. We don't record who sent the report. Please don't include personal information you don't want us to have.
Technical data
Like any web service, our hosting provider records technical data about requests, such as IP addresses, browser type and timestamps, which we use for security and to keep the service running. Our own logs record website names and the results of content checks.
How we use it
- To run your account, host your websites and show you which websites are yours.
- To check content before it is published and to handle abuse reports.
- To keep Webloyt secure, fix problems and prevent misuse.
- To meet legal obligations.
We don't use your data for advertising, and we don't sell it.
Who we share it with
We use these service providers to run Webloyt. They process data on our behalf:
| Provider | What for | What they receive |
|---|---|---|
| Sign-in, and Safe Browsing checks of links | Your sign-in with your Google account; the web addresses your pages link to or load, to check them against Google's list of unsafe sites | |
| Microsoft Azure | Hosting, file storage, database | Your account record and everything you publish |
| OpenAI | Content moderation | The text of pages you publish, the addresses of external images on them, and photos you upload, for automated checking |
| IPFire DBL | Blocklist of harmful domains | The domain names your pages link to or load images from |
OpenAI processes moderation requests under its API data policies, which say API data is not used to train its models. Your AI assistant (for example Claude or Mistral) is run by its own provider under its own privacy policy; what you type in your assistant is governed by that policy, not this one.
We may also disclose information if the law requires it, or to protect people from harm.
Visitors to Webloyt sites
Webloyt websites contain no scripts and no trackers. A page may load images, fonts or stylesheets from other services chosen by the website's owner (for example Unsplash or Google Fonts). Those services receive your IP address and browser details when your browser loads them, under their own privacy policies.
Each website's owner is responsible for its content. Report anything that breaks our rules on the report page.
Cookies and tracking
Webloyt websites don't set cookies. webloyt.cloud uses no analytics or advertising cookies. The only cookie is a session cookie on the administrator pages, used by the people who run Webloyt to sign in.
How long we keep it
- Websites: until you delete them. A deleted website goes offline immediately and stays in the trash for 14 days so it can be restored; then its files and the record linking it to your email are deleted permanently and the name becomes available again.
- Your account: as long as you have websites or stay connected. Contact us to delete your account entirely.
- Abuse reports: as long as needed to handle them and prevent repeat abuse.
- Technical logs: for a limited period set by our hosting provider.
Your choices and rights
You can delete any file or website at any time through your AI assistant. You can disconnect Webloyt from your assistant whenever you like. Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to how we use it. To make a request, contact us at admin@webloyt.cloud.
Children
Webloyt is not intended for children under 13, and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date at the top. For significant changes, we'll make the change clear on this page.
Contact
Questions about privacy or your data: admin@webloyt.cloud.