Privacy

What we collect,
and what we don't.

usermoods exists so you can hear from your users without building a surveillance apparatus to do it. This page says plainly what is stored, where it goes, and how to get rid of it.

Last updated 13 September 2026


If you have an account

To run your account we store your name, your email address, and a hashed version of your password that cannot be reversed. If you subscribe, Stripe handles the payment and we keep only the customer and subscription identifiers it gives us, along with your plan and its renewal date. We never see or store your card details.

For each site you add we store its name, your widget settings, and any logo you upload.


Feedback your visitors leave

When someone uses the widget on your site, we store what they wrote, whether it was a like, an idea or an issue, the page they were on, and their browser's user-agent string. A name and an email address are stored only if they chose to give them — feedback can be left entirely anonymously, and that is the default.

Mood ratings work the same way: the score, an optional comment, an optional email address, and the page it came from.

We do not store visitors' IP addresses. An IP is hashed on arrival and only the hash is kept, purely so the same person submitting twice can be recognised without us ever holding the address itself. The hash cannot be turned back into an IP address.

This data belongs to you, the site owner. We process it on your behalf and never use it for anything of our own.


The iOS app

If you link the app to your account, we store the device's name so you can tell which phone is linked, and a push token from Apple so notifications can reach it. That is all. The app contains no analytics and no third-party SDKs, and it does not track you across apps or websites.

Unlinking the phone, from the app's settings, deletes both immediately.


Cookies

The cookies we set are the ones needed to keep you signed in and to stop forged requests. There are no advertising cookies, no analytics cookies, and no third-party trackers. Our network provider also sets a cookie to tell humans from bots. That is the entire list, which is why there is no cookie banner to dismiss.

The feedback widget itself sets no cookies at all on your visitors.


Who else touches it

We use a small number of companies to run the service. They only ever process data on our instructions. We do not sell data to anyone, ever, and we never will.

Render

Hosts the application and its database.

Cloudflare

Serves and protects the site and the widget.

Cloudflare R2

Stores the logos and avatars you upload.

Stripe

Takes payments. Card details go straight to them.

Resend

Delivers notification and account email.

Apple

Delivers push notifications to the iOS app.


How long we keep it

Feedback and mood data stay until you delete them or close your account. When an account is closed we delete its data within 30 days, except anything we are required to keep for accounting purposes, which is kept for six years.


Your rights

Under UK and EU data protection law you can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can also object to how we use it or ask us to restrict it. Email us and we will action it within one month.

If your visitors ask you to remove their feedback, you can delete it yourself from your dashboard at any time, and it is gone from our systems too.

If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk.


Getting in touch

The data controller is Songbox Technologies Ltd. For anything on this page, including requests about your data, use the contact form or email [email protected].

If we change this policy we will update the date at the top of the page.