Privacy
Last updated 5 September 2026
novrl is a free tool with no accounts. This page explains exactly what happens to what you upload. Plain language, no lawyer voice.
There is no account
novrl does not ask for an email address, a name or a password, and it does not create a user record for you. When you publish a demo you receive a private edit link containing a secret. Only a SHA-256 hash of that secret is stored, so the secret itself cannot be recovered from our storage. If you lose the link, we cannot get it back for you.
What gets stored
- The screenshots you upload, resized in your browser to at most 1600 px wide and converted to WebP.
- The text you type: the demo title, the step titles and the tooltips.
- The hotspot coordinates for each step, the frame theme, the badge setting and a creation timestamp.
- A hash of the edit secret for that demo.
Files are stored on Vercel Blob and served from a global content delivery network, which means copies may be cached on servers in the United States, Europe and elsewhere. The site itself is hosted on Vercel, whose privacy notice is at vercel.com/legal/privacy-policy.
Published demos are public
Anyone who has the link to a demo can open it, and the underlying image and JSON files are publicly readable at their storage URLs. Demo links are not guessable in practice, but they are not secret either. Do not upload screenshots containing real customer data, personal information, credentials, API keys, internal financials or anything else you would not put on a public web page.
Analytics
novrl does not run any analytics product, does not set first party cookies and does not track you across sites. Vercel keeps short lived server request logs for operational reasons, which include IP addresses. We also hold a short lived in-memory count of publishes per IP address inside the serverless function to stop abuse. It is not written to disk and disappears when the function instance recycles.
Advertising
The home page and the about page carry Google AdSense advertising. Viewer pages and embed pages carry no advertising at all. Google and its partners may use cookies or similar technology to serve and measure ads, including personalised ads based on your prior visits to this and other websites.
- How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites
- Google advertising technologies: policies.google.com/technologies/ads
- Opt out of personalised advertising: google.com/settings/ads
- Third party vendor opt outs: optout.aboutads.info and youronlinechoices.com
If you are in the European Economic Area, the United Kingdom or Switzerland, a Google consent message asks for your choices about personalised advertising before ad cookies are set, and you can change those choices at any time from the consent control on the page.
Children
novrl is not directed at children under 13 and we do not knowingly collect their information.
Deleting a demo
Open your private edit link and press Delete. That removes the demo JSON and every screenshot in it from storage. Cached copies on the content delivery network expire shortly afterwards.
If you lost the edit link, or you want a demo removed that someone else published about you, email dylandirectories11@gmail.com with the demo URL. Removal requests are handled within 7 days.
Retention
Demos are kept until they are deleted. There is no automatic expiry today. If that ever changes, this page will say so at least 30 days before the first deletion, and the notice will be posted from @dylan_builds as well.
Changes to this policy
If this policy changes materially, the date at the top of the page changes with it. Continuing to use novrl after that means you accept the updated version.