Legal notice

Information pursuant to Section 5 of the German Digital Services Act (DDG)

Operator

Competent supervisory authority for digital services

Notice concerning user content

Users are responsible for the content they provide, including ensuring that they hold the necessary rights and do not infringe copyright.

Privacy notice

prefs.io stores the account information needed for authentication, the Markdown preferences you create, and metadata required to operate access links. Secret-link tokens are never stored in plaintext.

prefs.io does not set or read cookies. Authentication tokens, refresh tokens, OAuth state, and PKCE data are stored in your browser's session storage and cleared when you log out or delete your account. AWS Cognito's hosted authentication pages may use essential cookies on the Cognito domain.

No advertising, analytics, or cross-site tracking is used. Operational logs are retained briefly for reliability and security and must not contain preference content or secret tokens.

You can delete individual preferences, revoke links, or delete your account and active data from the application. Encrypted, non-current S3 object versions retained for recovery expire within 30 days; they are not exposed through the service while retained.

After account deletion, a pseudonymous revocation marker is retained for at most two days so already-issued session tokens cannot recreate or expose data.