Privacy by mode

You assert identity. Comments does not authenticate end users and does not collect email addresses. Opaque ids can still identify a person inside your app, so they are not anonymous data.

Where text lives

• Local: discussion JSON stays in that browser's localStorage. Bootstrapware does not receive it.
• BYO: Bootstrapware stores the published app config. Threads, comments, mention ids, and read markers stay on your backend.
• Hosted: Bootstrapware stores comment bodies, mention ids, optional display names, read markers, and operational timestamps. You moderate that content. You are responsible for it.

What never goes to MCP

MCP configures apps. It does not accept a comment body, a mention directory, a resource title, or file bytes. Live and secret keys stay on the dashboard.

Callbacks are not email

comments.user_mentioned and the other Hosted webhooks carry ids, the actor, and a time. They do not carry the comment body, a display name, a resource title, or an email address. BYO returns events to the widget and may call your own notifier. Bootstrapware does not claim to know that BYO content changed, and it does not send email or push for either mode. If you want a notification, your server authorizes a content fetch and delivers it.

Cancel Hosted: writes freeze immediately, export remains for 30 days, then Hosted rows are deleted. Hosted to BYO keeps the rows and does not start that clock. The same timeline is on billing and Terms. Company privacy: bootstrapware.co/privacy.

Related: Modes · Webhooks · Export and purge