Last updated: 12 August 2026
NodePen Ltd ("NodePen," "we," "us") is a company registered in England and Wales (company number 17257213). We are the data controller for the personal data described in this policy. You can reach us at support@nodepen.io.
Account data. A unique account identifier, your name (if provided by a social login provider), and your email address. We never see your password — authentication is handled by our authentication provider, and passwords are salted and hashed before we would ever encounter them.
Billing data. Payments are handled entirely by Stripe. We store a Stripe customer ID associated with each Team, and we mirror the latest subscription status from Stripe's own events so it can be displayed in-app — this is the same information visible in Stripe's own customer portal. Subscription history is kept as an ongoing record.
Usage data. We record usage and interaction events against your account server-side, to understand how the Service is used. We do not use any client-side analytics or tracking scripts.
Content data. Scripts, solutions, and uploaded models — see Section 5 of this policy and Section 6 of our Terms of Service.
| Purpose | Legal basis |
|---|---|
| Operating your account, authentication, and Team functionality | Performance of a contract with you |
| Billing and subscription management | Performance of a contract with you |
| Usage analytics and service improvement | Legitimate interests |
| Retention of solutions, documents, and models (Section 5) | Legitimate interests |
| Fraud and abuse prevention | Legitimate interests |
| Financial and tax record-keeping | Legal obligation |
We do not use automated decision-making that produces legal or similarly significant effects on you.
We keep account and billing data for as long as your account is active, and billing records for as long as required for tax and accounting purposes.
Solutions, the document versions that produced them, and uploaded input models are retained for the purposes described in Section 3 for as long as they remain linked to your account. You may request deletion of this data by contacting support@nodepen.io — see Section 6 of our Terms of Service for how we evaluate these requests.
When you delete your account or the underlying document, we remove the link between this data and your identity. Once anonymized, the data is no longer personal data under this policy, and we may keep it indefinitely to improve the Service.
We use the following subprocessors:
| Subprocessor | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Hosting, database, caching, and file storage (Cloud Run, Cloud SQL, Memorystore, Cloud Storage, Firebase Hosting) | europe-west4, Netherlands |
| PostHog | Server-side product analytics | EU |
| Resend | Transactional email (we do not send marketing email) | Ireland |
| Stripe | Payment processing | Stripe Payments Europe, Limited (Ireland); processing may occur globally, including in the United States |
Most of our infrastructure sits within the EU. Stripe processes data globally, including in the United States, relying on Stripe's Data Privacy Framework certification together with the UK's International Data Transfer Addendum and Standard Contractual Clauses as the transfer mechanism.
Under UK GDPR, you have the right to access, correct, delete, restrict, or export your personal data, and to object to certain processing. To exercise any of these rights, contact support@nodepen.io. The right to deletion is subject to the retention terms described in Section 5.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk) — but we would appreciate the chance to resolve any concern directly first (see Section 9).
If you have a complaint about how we have handled your personal data, contact support@nodepen.io. We aim to acknowledge complaints within 30 days and will work with you to resolve them.
We use a small number of cookies to run the Service. See our Cookie Policy for details.
NodePen is not directed at children, and we do not knowingly collect data from anyone under 13.
We may update this policy from time to time. We will notify you of material changes by email or in-app notice.
support@nodepen.io — Charles Driesler, Director.