Privacy

Who we are

Suddn makes websites for small businesses in Canada. Suddn's founder is responsible for the information described here. You can reach us at hello@suddn.co.

Building a website before you publish

You can build a website on suddn.co without an account. What you enter there, such as your business name, your contact details, your menu or services, your hours and the look you pick, is kept only in your browser, on your device, until you publish it or save it with us. We don't store it before then. Clearing your browser's data for suddn.co deletes it. (If you use writing help, the few details it needs are sent to Anthropic to draft text for you; see “Writing help” below.)

When you press “Build my website free” on our homepage, the business name you typed is passed to the next screen in its web address (suddn.co/start?name=…), so, like any web address, it can appear in our hosting provider's request logs.

You can't upload photos before you log in.

Template photos

The photos in our website templates come from Unsplash. Where you see them on suddn.co (the homepage, the template library and template pages, our themes and industry pages, the look step when you build a website, the photo picker in the dashboard), your browser loads them straight from Unsplash (images.unsplash.com). Like any website that serves images, Unsplash then sees your internet (IP) address and the usual details a browser sends. We don't send Unsplash anything about you.

Websites that owners publish with Suddn don't load anything from Unsplash, and template photos aren't added to them yet: we're waiting for Unsplash to confirm how they may be used. Once they can be, a template photo an owner adds is copied into our storage like an upload, and we tell Unsplash which photo was used (as Unsplash asks), without any details about the owner or their visitors.

Writing help

When you press “Write it for me” or one of the “Suggest” buttons (services, menu items or products), we send three things to Anthropic, a company based in the United States, so its AI model, Claude, can draft text for you: your business name, the kind of business you picked and, if you typed it, your city. Nothing else from your website is sent, and nothing is sent unless you press one of those buttons.

What comes back is a draft, marked “Written for you, edit anything”. It goes on your website only after you keep or change it. We don't store your request or the draft on our side: the draft stays in your browser with the rest of your website until you publish or save it.

Anthropic's commercial terms say it may not train its models on what we send. Anthropic says it deletes these requests and answers within 30 days, unless it has to keep them longer, for example to enforce its usage policy or to comply with the law.

To stop abuse of writing help, we count requests using a scrambled (hashed) version of your internet address, never the address itself, and delete those counts within about a day.

Publishing

Publishing a website needs a login. Suddn is in early access: for now, only Suddn's founders can log in and publish.

If you have an account

When you log in, we keep your email address (and, if you log in with Google, the name, email and account picture Google shares with us) so you can log in again. If you set a password, we store only a scrambled (hashed) version of it, never the password itself. When you choose a new password, we check it against Have I Been Pwned's list of leaked passwords: only the first 5 characters of a scrambled version leave our server, never the password. To stop password guessing, a bot check from Cloudflare (Turnstile) runs on the login and password reset forms, and we count attempts using scrambled (hashed) versions of your internet address and email address, never the addresses themselves, and delete those counts within about a day. A small cookie keeps you logged in on that browser. If you use more than one account on the same browser, a second, encrypted cookie remembers up to 5 of them (name, email and their sessions) so you can switch; “Remove from this device” on the login page forgets one. What you put on your website, including the photos you upload, is stored with us and shown publicly on your website, because that is what a website is for. Deleting your website from Settings deletes it, its photos, its quote requests and messages, and your notes about customers.

People who visit a website made with Suddn

Websites made with Suddn don't use advertising trackers or analytics cookies. We count visits and taps on the Call and Directions buttons as totals per day, so the owner can see how their website is doing; those counts don't say who you are.

If you send a quote request, an enquiry or a message through a website, we store what you wrote (your name, how to reach you, your message and, for car repairs, your vehicle) so the business owner can read it in their dashboard, and we email it to them. Only that owner can see it, and they can keep a private note about you next to it. To stop abuse, we keep a scrambled (hashed) version of your internet address for up to two days, then delete it, and a bot check from Cloudflare (Turnstile) runs on the form.

Saving your website for later

If you can't publish yet, you can save your email address and your website so we can email you when you can publish it. When you do, we store:

• your email address;
• your website as you built it (the business name, the details you entered and the look you picked), and the website address made from the name (for example, yourname.suddn.page);
• the date and time you saved it, and the wording you agreed to, with its version.

If you save again with the same email address, we keep the website you saved first. If you reserved a website address on our earlier homepage, we keep that reservation for the same purpose.

To stop abuse, we keep a scrambled (hashed) version of your internet address for about two days, then delete it. Our database never stores the address itself. Like any website host, our hosting provider sees your internet address when it delivers the website and runs a bot check that keeps automated logins and form submissions out.

We do not use advertising trackers or analytics cookies on suddn.co.

Messages and reports you send us

When you write to us through suddn.co/contact, we keep your name, your email address, the topic and your message, and email them to hello@suddn.co so we can reply. When you report a website through suddn.co/report-abuse, we keep the address you reported, the reason, what you wrote and, only if you give it, your email, and email them to abuse@suddn.co so we can review the website. With each, we keep a scrambled (hashed) version of your internet address, never the address itself, to stop the forms being misused.

We delete these messages and reports 12 months after you send them.

Why we use it

• to keep your saved website until you can publish it;
• to email you when you can publish it, and about nothing else;
• to answer your message, or to review a website you reported.

We do not send a newsletter, and we never sell or rent your information.

Where it is stored

Your information and uploaded photos are stored in a database and file storage hosted in Canada (Supabase). Our website runs on Vercel, a company based in the United States, so information you send through the website may be processed in the United States on its way to our database. Emails such as login links, password reset links and message notifications are sent through Resend, also in the United States. If you use writing help, your business name, kind of business and city are sent to Anthropic, also in the United States. Each processes it only to provide their services to us.

How long we keep it

We keep your saved website and email address until you can publish and decide whether to. If you don't, we delete them. You can ask us to delete them at any time.

Your choices

Email hello@suddn.co to see, correct or delete what we hold about you, or to stop any emails from us. Every email we send will also include a way to opt out.