Legal
Privacy Policy
This policy explains what Mantel, operated by Alok Kumar ("Mantel", "we") collects when you use Mantel, why, where it's kept, and the choices you have. We collect only what we need to run the service, and we don't sell your data or use it for advertising.
What we collect
Account information
- Your name and email address.
- If you sign up with a password, a salted hash of it (never the password itself).
- If you sign in with Google, the basic profile Google shares: your name, email address, profile picture link, and a Google account identifier.
- Sign-in sessions, including the IP address and browser details recorded with each session, to keep you signed in and protect your account. Rate-limit records, to stop abuse.
Your content
Everything you put in Mantel: drafts and published pieces, their recovery history, section settings, images and other media you upload, and the published snapshots sent to your site. Images you share publicly have location, camera and other embedded metadata removed; the original upload is kept privately for you.
Connected accounts
When you connect GitHub, Vercel or Cloudflare, we store the access tokens those providers issue, encrypted at rest, plus the repository and project details needed to import content and publish. We use them only to do what you ask: read your repository, and start and track deployments.
Site analytics
If you add Mantel's analytics snippet to your site, we count page views without cookies. We keep daily totals per page and, per visit, the referring website, country, and whether the device is mobile or desktop. We don't store visitors' IP addresses, browser fingerprints or anything that identifies a person.
Studio usage
The Mantel studio uses Cloudflare Web Analytics, which is cookie-free, to measure page loads and performance. Our servers keep short-lived technical logs (for example, errors) to fix problems.
Cookies and local storage
We use one essential sign-in cookie to keep you logged in. The studio also saves preferences and unsent drafts in your browser so nothing is lost offline. We don't use advertising or tracking cookies.
How we use it
- To provide Mantel: sign you in, save and publish your content, and serve your images.
- To send account emails, such as confirming your address and resetting your password, and important notices about the service or your plan.
- To keep Mantel secure, prevent abuse and fix problems.
- To answer you when you contact support.
Where it's stored and who processes it
Mantel runs on Cloudflare. Accounts and sessions are stored in Cloudflare D1, your content in Cloudflare Durable Objects, and media in Cloudflare R2. These service providers process data for us:
- Cloudflare: hosting, storage, delivery and studio analytics.
- Resend: sending account emails (your email address and the message).
- Google: sign-in, if you choose "Continue with Google".
- GitHub, Vercel, Cloudflare Pages: only when you connect them, to import and publish your content.
- Open Library and TMDB: when you search for a book or film, your search terms are sent to them to find covers and details.
These providers may process data outside India, including in the United States and Europe. When paid plans launch, payments will be handled by a payment provider; we'll name it here before any charge, and Mantel will never see or store your full card number.
Sharing
We don't sell or rent personal data. We share it only with the providers above to run Mantel, when you publish content to your own site, or when the law requires it.
How long we keep it
- Your account and content: while your account is open. Content you move to the trash can be restored; deleted images can be restored for 30 days, then they're removed.
- Shared preview links expire after seven days unless you revoke them sooner.
- When you ask us to delete your account, we delete your account and content within 30 days, except where we must keep something by law (such as payment records).
Your choices and rights
- Export your content anytime from Settings → Export.
- Correct your details, or ask us for a copy of your data, to fix it, or to delete your account, by emailing hello@mantelcms.com.
- Disconnect GitHub, Vercel or Cloudflare at any time from the provider's settings.
Depending on where you live (for example under India's Digital Personal Data Protection Act, 2023, or the GDPR), you may have further rights, including to withdraw consent or complain to a regulator. Email us and we'll respond promptly, and within 30 days at most.
Security
Connections are encrypted (HTTPS). Passwords are hashed, provider tokens are encrypted at rest, and each person's content is kept in their own isolated store. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
Children
Mantel isn't meant for children under 16, and we don't knowingly collect their data.
Changes
We'll update this page when our practices change and email you about significant changes. The date at the top shows the latest version.
Contact
Questions or requests: hello@mantelcms.com. Mantel, operated by Alok Kumar, Pune, Maharashtra, India. See also our Terms of Service.