Last updated June 11, 2026
Privacy Policy
This Privacy Policy explains what personal data PreWire processes, why it is processed, and what rights users may have. PreWire is a non-commercial study project offered worldwide; legal notices are provided in English.
1. Who operates PreWire
PreWire is a study project and non-commercial web application hosted at https://prewire.app.
Data controller: PreWire Team. Service address for legal notices: USA, State of New York (full address for legal notices available on request at prewireapp@gmail.com).
Contact for privacy questions: prewireapp@gmail.com.
PreWire is offered to users worldwide. Legal notices on this site are provided in English as the project's primary language. The operator cannot provide every legal page in every jurisdiction's language, but will respond to reasonable requests sent to the contact email below.
2. Non-commercial status
PreWire is described here as a non-commercial study project. It does not currently offer paid subscriptions, advertising, sponsorships, or direct monetization.
If that changes, this Privacy Policy should be updated before the new processing begins.
3. Data PreWire processes
Depending on how you use the application, PreWire may process:
- account details such as name, email address, and login method
- authentication and security data such as password hash, session token, session expiry, IP address, and user agent
- project content you create, including project names, descriptions, wizard answers, and exported or imported project data
- support or contact information you send directly to the operator by email
4. Why the data is processed
- to create and manage user accounts
- to authenticate users and maintain secure sessions
- to store, update, export, and import project data requested by users
- to prevent abuse, investigate misuse, and keep the service secure
- to respond to user inquiries and operational issues
- to send transactional emails such as verification, password reset, and account-related notices through Resend
- to understand aggregate traffic trends through GoatCounter and Google Analytics (via Google Tag), but only after the user gives consent for analytics
5. Legal bases for EEA and UK users
Where GDPR or similar rules apply, processing is generally based on:
- performance of a requested service or pre-contractual steps, for account creation, login, and project storage
- legitimate interests, for service security, abuse prevention, troubleshooting, and basic logs
- consent, for optional analytics and, if introduced later, other optional tracking tools
- where required for international transfers, appropriate safeguards such as the provider standard contractual clauses or equivalent measures offered by infrastructure vendors
6. Hosting and international transfers
PreWire is hosted on Vercel infrastructure, primarily in the United States. The application runtime, authentication flows, and related server processing therefore take place outside the European Economic Area and the United Kingdom unless a future deployment region is explicitly stated here.
Account data, project content, and other information you store in PreWire are persisted in a PostgreSQL database operated by Neon, currently in the European Union (Germany). That includes names, email addresses, password hashes, session records, and wizard project data.
If you access PreWire from the EEA, the UK, or another jurisdiction with rules on cross-border data transfers, your personal data may be transferred to and processed in the United States and possibly other countries where these providers operate facilities or subprocessors.
Transactional email is delivered through Resend, which may process message metadata and delivery data in the United States or other countries where it operates.
Vercel, Neon, and Resend act as processors for the services described above. Their privacy documentation and data processing terms apply to the processing they perform on behalf of PreWire. Where required, international transfers rely on appropriate safeguards such as standard contractual clauses or equivalent measures made available by those providers.
If the hosting region, database provider, or transfer safeguards change, this section will be updated before or when the change takes effect.
7. Cookies and similar technologies
The current application uses authentication and session mechanisms that may rely on strictly necessary cookies or similar storage for login and account security.
The site also stores a local consent preference under the key cookie_consent so the cookie banner remembers whether you chose analytics, necessary-only storage, or rejection of non-essential tracking.
If you consent to analytics, PreWire loads GoatCounter and Google Analytics (through Google Tag Manager or gtag.js, depending on configuration) for aggregate visit analysis. These tools are used here to understand traffic trends without selling personal data or using analytics for advertising or profiling.
If you choose Necessary Only or Reject All, GoatCounter and Google Analytics are not loaded. You can reopen cookie settings from the footer at any time.
Typography uses fonts from the Google Fonts catalog, but they are self-hosted through Next.js (next/font). Font files are served from PreWire's own hosting domain, not loaded from Google font servers in your browser at runtime. No additional consent is required for that font delivery.
8. How long data is kept
- account data is kept until the account is deleted or removed
- session data may remain until expiry or earlier invalidation; the configured session duration is currently up to 30 days
- project data is kept until deleted by the user or removed by the operator
- logs may be kept for security, debugging, and abuse prevention for a limited period appropriate to those purposes
9. Sharing of data
PreWire does not describe itself here as selling personal data.
Data may be disclosed only where reasonably necessary, including:
- to Vercel for application hosting and runtime processing
- to Neon for database hosting and storage of account and project data
- to GoatCounter and Google (Analytics / Tag), but only after analytics consent is granted
- to Resend to deliver transactional emails such as verification and password reset messages
- to comply with applicable law, court orders, or lawful requests
- to protect the security, rights, or integrity of the service
10. User rights
Depending on applicable law, you may have the right to request:
- access to your personal data
- correction of inaccurate data
- deletion of your data
- restriction or objection to certain processing
- portability of data you provided
- the ability to complain to a supervisory authority
Requests can be sent to prewireapp@gmail.com. Identity verification may be required before sensitive account actions are completed.
If you report a privacy problem by email, the operator will review it and remove relevant personal data without undue delay where appropriate. You can download a copy of your account and project data from account settings, or delete your account at any time from the same page.
11. Reports and prompt removal
If any personal data, graphic, text, or other content on this site is problematic in any way, email prewireapp@gmail.com with a clear description. The operator will review the report and remove the relevant personal data or site content as quickly as possible. Valid privacy and content concerns are treated as a priority.
12. Children
PreWire is not intentionally directed to children. If you believe a child has provided personal data without appropriate permission, contact the operator so the data can be reviewed and, where appropriate, removed.
13. Changes to this policy
This Privacy Policy may be updated as the project evolves. Material changes should be reflected on this page before or when the related processing changes start.