Privacy Policy
Last updated: February 21, 2026
1. Introduction
BSquared Technologies LLC ("we," "us," or "our") operates RndrKit, a pre-rendering-as-a-service platform available at https://rndrkit.io. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Service.
2. Information We Collect
2.1 Account Information
When you sign up, we collect information from your OAuth provider (Google or GitHub):
- Email address
- Display name
- Profile picture URL
- OAuth provider account ID
2.2 Domain and Usage Data
When you use the Service, we collect:
- Custom domains you register and their associated origin URLs
- Render logs, including: requested paths, user agent strings of crawlers, cache hit/miss status, render times, and timestamps
- Render usage counts per domain and billing period
2.3 Contact Form Data
When you submit a message through our contact form, we collect your name, email address, subject, and message content. This information is stored in our database to respond to your inquiry and is retained for as long as needed to resolve your request, after which it may be deleted.
2.4 Payment Information
Payment processing is handled entirely by LemonSqueezy. We do not store your credit card numbers, bank account details, or other financial information on our servers. We receive only your subscription status, plan type, and billing identifiers from LemonSqueezy.
2.5 Automatically Collected Information
When you visit our website, we may automatically collect standard server log information such as your IP address, browser type, and pages visited.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the pre-rendering service
- Authenticate your account and manage your session
- Process your subscription and manage billing through LemonSqueezy
- Monitor render usage and enforce plan limits
- Display analytics and render logs in your dashboard
- Send you service-related communications (usage alerts, billing notifications, important updates)
- Respond to your contact form submissions and support requests
- Analyze website usage patterns through Google Analytics to improve the Service (see Section 5)
- Diagnose technical issues and improve the Service
4. Data Sharing and Third Parties
We do not sell your personal data. We share information only with the following third-party services that are necessary to operate RndrKit:
- Cloudflare — CDN, SSL certificate provisioning, and DDoS protection. Cloudflare processes request traffic to your custom domains.
- LemonSqueezy — Payment processing and subscription management. LemonSqueezy receives your email and payment details to process transactions.
- Amazon Web Services (AWS) — Infrastructure hosting. Your data is stored on servers in AWS data centers.
- Google / GitHub — OAuth authentication providers. We receive basic profile information when you sign in.
- Google Analytics (GA4) — Website analytics. Google Analytics collects anonymized usage data including pages visited, session duration, device type, and general geographic location. See Section 5 for details.
We may also disclose your information if required by law, legal process, or a government request.
5. Cookies and Tracking
We use cookies and similar technologies for the following purposes:
Essential Cookies
- Session cookies — To maintain your authenticated session after signing in. These are required for the Service to function.
- CSRF protection cookies — To protect against cross-site request forgery attacks.
Analytics Cookies
- Google Analytics 4 (GA4) — We use GA4 to understand how visitors interact with our marketing website. GA4 collects data such as pages visited, time spent on pages, referral sources, device type, browser type, and approximate geographic location. This data is used to improve our website and user experience. Google may use this data in accordance with its own Privacy Policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
We do not use advertising trackers, retargeting pixels, or any form of cross-site advertising tracking. We do not use Facebook Pixel or similar advertising services.
6. Data Retention
- Account data is retained for as long as your account is active. Upon account deletion, your personal information is permanently removed within 30 days.
- Render logs are retained for 90 days for analytics purposes, after which they are automatically purged.
- Cached rendered content (HTML snapshots of your site) is stored temporarily in Redis and automatically expires based on your plan's cache refresh interval (hourly, daily, or weekly).
- Contact form submissions are retained for as long as needed to resolve your inquiry, typically no longer than 12 months.
- Payment records are retained as required by applicable tax and accounting regulations.
- Analytics data collected by Google Analytics is retained according to our GA4 data retention settings and Google's data retention policies.
7. Data Security
We implement reasonable technical and organizational measures to protect your personal information, including:
- All data in transit is encrypted via TLS/SSL (HTTPS)
- Database connections use encrypted SSL connections
- Authentication is handled via OAuth providers (no passwords stored)
- Infrastructure access is restricted through IAM roles and SSH key authentication
While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
GDPR Rights (EEA/UK Residents)
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
CCPA Rights (California Residents)
- Right to know what personal information we collect
- Right to request deletion of your personal information
- Right to opt out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
9. Children's Privacy
The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service at least 30 days before they take effect. We encourage you to review this page periodically.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: