PageClay · Information
Data processing
Using PageClay to process personal data on your behalf.
Updated: 1 November 2026
Before collecting personal data
If you use PageClay as a controller to collect personal data, contact support@pageclay.com before that processing begins to arrange a completed data processing agreement under Article 28 GDPR. Identify the responsible person or organisation, the relevant workspace and your intended use. Never include an Account key.
This information page is not itself a concluded agreement. A completed agreement must identify the parties, processing instructions and scope, applicable safeguards and a usable contact and return/deletion process. Do not assume that creating an anonymous workspace concludes it.
Roles and scope
You determine the purpose and lawful basis of your page’s collection. Alex Ostermann operates PageClay and, where agreed, processes your page and response content on your documented instructions. Account security and platform administration are separate processing described in the privacy policy.
The service stores, hosts, delivers and deletes pages, uploaded images and submitted responses with their publication snapshots. Data categories and the people concerned depend on your page. Do not submit special-category or criminal-offence data without a separately assessed and agreed arrangement.
Technical safeguards
Implemented safeguards include HTTPS, separate creator/public/media origins, server-side account ownership checks, hashed Account keys, HttpOnly session cookies, separate administrator authentication, request limits and minimal application error events.
Database and image deletion use a coordinated retryable process. D1 and R2 use EU jurisdiction. The operator is the only person administering PageClay; infrastructure and email providers process data within their services. These measures do not establish a certification or replace assessment of your particular use.
Infrastructure and contact
Cloudflare supplies hosting, database and image storage. STRATO supplies operator email. Their respective processing terms and any international-transfer safeguards must be included in the applicable arrangements. EU database and bucket jurisdiction does not mean all connected processing occurs exclusively in the EU.
Use support@pageclay.com for instructions, privacy requests and questions about an appropriate agreement. We will not treat a request email, by itself, as proof that a contract has been completed.