privacy
Privacy policy
What we collect, why, and who sees it. Short version: very little, to run your subscription, and nobody gets it for advertising.
Effective October 20, 2026. Plain-English summary first, details below.
- We collect as little as we can: your email, your subscription status, and what you send us.
- Card payments are handled by Stripe. We never see or store card numbers.
- No ads, no tracking pixels, no analytics scripts, and we don't sell or rent data.
- When you use pw/templates inside an AI app, we never receive your conversations, only the request for a template or prompt.
Who we are
pw/templates (Panas Website Templates) runs pwtemplates.com, a subscription library of website templates and build prompts for web agencies. "We" means pw/templates. Questions about this policy go through the contact form.
What we collect
Account and subscription
When you subscribe, Stripe sends us your email address, your Stripe customer ID and your subscription status. We store those three things so we can tell whether your account has Pro access.
Signing in
Sign-in works by email: we send a one-time link or code to your address. After you sign in we set one cookie, pw_session, which holds your email and an expiry date, signed so it can't be forged. It lasts up to 30 days. Your browser also keeps two small local settings (your light/dark theme choice and whether you're signed in) that never leave your device.
Contact form
If you write to us, we receive the name, email and message you enter.
Technical logs
Our hosting provider, Cloudflare, processes standard request data (IP address, browser type, the page requested, time) to deliver the site and protect it from abuse.
Using pw/templates in AI apps
pw/templates works as a connector (an MCP server at pwtemplates.com/mcp) inside AI apps such as Claude and ChatGPT, and in coding tools such as Claude Code, Cursor and VS Code.
- What we receive: the tool requests the AI app sends on your behalf, such as which category, template rank or prompt was asked for or a search phrase.
- What we don't receive: your messages, your conversation history, files you share with the AI app, or anything about your clients unless the AI app puts it in a request.
- Read-only: the connector can only read templates and prompts. It can't change your account, your subscription or your payment details.
- Signing in from an AI app: if you sign in to use Pro templates, we email you a one-time code and give the AI app an access token tied to your email. Access tokens expire after 1 hour and refresh tokens after 30 days. They are signed, not stored, and we check your subscription again on every request, so cancelling ends Pro access right away.
- The AI app's own policy: the company that runs the AI app handles your conversations under its own privacy policy.
How we use it
- To give you access to what you paid for and keep your subscription working.
- To send sign-in links and codes and reply to messages you send us.
- To keep the site and connector secure and running.
We don't use your data for advertising or to train AI models, and we don't sell it.
Who we share it with
| Service | What for | Data involved |
|---|---|---|
| Stripe | Payments and subscriptions | Email, payment details (held by Stripe) |
| Cloudflare | Hosting, storage of subscription status, security | Email, subscription status, request logs |
| Resend | Sending sign-in emails and forwarding contact messages | Email address, message contents |
| Google Fonts | Loading the site's fonts | IP address and browser info, sent by your browser |
Template previews load demo photos from Unsplash, which receives your IP address when you view them. We share data with anyone else only if the law requires it.
How long we keep it
- Subscription records: while you have an account, and afterwards only as long as accounting and tax rules require.
- Contact messages: as long as needed to deal with your request.
- Session cookie: up to 30 days. Connector tokens: 1 hour (access) and 30 days (refresh).
- Request logs: kept by Cloudflare for a limited period under its own policies.
Your choices and rights
You can ask us for a copy of your data, to correct it, or to delete it, through the contact form. You can cancel your subscription any time from your account page. Depending on where you live, you may have further rights under local data protection law, including the right to complain to your data protection authority.
Children
pw/templates is a business tool and isn't meant for anyone under 16.
Changes
If we change this policy we'll update the date at the top of this page. If a change is significant, we'll tell subscribers by email.