Scope of this policy
This privacy policy applies to the RunHTML website, HTML editor, webpage preview, temporary share pages, and related APIs. It explains how we handle technical information generated by your visit and HTML content you actively submit to the sharing feature.
Different features may handle data differently. Read the notice on the feature page before using sharing or a new feature. A more specific feature notice takes precedence for that feature.
Editor and local preview
HTML entered in the editor is used in your current browser by default. Running a preview creates a Blob URL in the browser and opens it in a new tab; normal editing and previewing do not automatically upload the code to the server.
To restore editing progress, RunHTML may use browser localStorage for your draft, language choice, and page preferences. The browser keeps this data on your device, and it may be lost when you clear site data.
Temporary shared content
The current HTML is sent to the server through an API only after you click Share and confirm. The server stores the HTML and creation time under a random token. The link is valid for 1 hour, is deleted after expiration, and the share page is marked as not for indexing.
Shared content is reviewed for safety first. Before review, the system removes script, style, template, noscript, comments, HTML tags, and other non-page text, then sends up to 2,000 characters to a third-party content-safety service.
Technical logs and security records
To provide the service, troubleshoot failures, remove expired shares, and prevent abuse, the server may record request time, path, browser information, network address, result, share token, code length, and request ID. Normal successful share logs do not store the complete HTML.
If a safety review rejects content or the review API returns an error, the review result and necessary response information may be written to security logs for troubleshooting. Encrypted reasoning fields from the review response are not written to logs.
Third-party services and external links
Pages may load fonts, icons, scripts, or a third-party service needed for content review. Third-party providers may handle basic network requests or review text under their own privacy policies. Review their privacy and cookie notices before using those services.
Retention and deletion
You manage browser drafts through your browser settings. Shared content on the server is normally kept for 1 hour, and an expired link also triggers deletion. A cleanup API scans for share files older than 1 hour and removes them. Technical and security logs may be retained as needed for operation, troubleshooting, and compliance.
Your choices and contact
You can choose not to enter code or create a share link, and you can clear your browser draft and site data at any time. Copy or download important code yourself. If you want to understand data handling, submit a privacy request, or report a security concern, contact us:
Policy updates
We may update this policy as features, technical practices, or applicable laws change. Updated content will be published on this page. When a change materially affects your choices or rights, we will provide a notice in an appropriate place.