Privacy at Hand Off

Without an account, your handoffs stay in your browser

An account is optional. Without one, Hand Off saves your handoffs and your edits in this browser's local storage and does not send them to a server.

• A handoff you create here is not shown to other visitors on other devices or in other browser profiles.
• Anyone using the same browser profile on the same device can see the same locally stored handoffs — on a shared or work computer, for example.
• Clearing your browser's site data can remove the handoffs stored here, and opening Hand Off in a different browser or device will not show them.
• Hand Off does not encrypt local browser storage. The device you're using is where your drafts actually live.

If you create an account

You can sign in with Google or with an email and password. Your account stores your email address and the handoffs you save to it.

• Handoffs in your account are stored on Hand Off's servers, hosted by Lovable Cloud, so you can open them on other devices.
• Each account's handoffs are private: only someone signed in to that account can read, change, or delete them, unless you choose to share one (see below).
• Handoffs already saved in your browser are only copied to your account if you choose to import them. The browser copies stay until you remove them.
• While a change is waiting to reach your account — for example, if you're offline — Hand Off keeps it in this browser and removes it once it's saved.
• Signing out removes your account's handoffs from this browser. Handoffs saved only in this browser stay there.
• Deleting a handoff removes it from your account. Deleting your account on the Account page permanently removes your account and every handoff in it.

Sharing a handoff

If you're signed in, you can create a read-only link to a completed handoff. Nothing is shared unless you create a link.

• Anyone with the link can view a saved copy of that handoff and download it as a PDF, without an account. They can't edit it or see your other handoffs, your email address, or your account.
• The link shows the version from when you shared it. Later edits appear only if you choose "Update shared version".
• You can stop sharing or replace the link at any time, and the old link stops working right away. This can't remove copies someone has already downloaded or a page that's already open.
• Shared pages are hidden from search engines. The private part of the link stays in the browser, so it isn't sent to our servers' logs, to analytics, or to sites you link to.
• Deleting the handoff or your account also stops its shared link.

When you use AI Review

AI Review is optional, and it only runs when you choose it. Opening a handoff, moving between steps, or refreshing the page sends nothing anywhere — the review starts when you click Run AI Review or Run updated review on the AI Review step.

When you do run it, the handoff you are reviewing is sent off-device for AI processing through the app's AI service. That can include the content in the handoff you're reviewing:

• the project name and description
• the current state, plus any metrics or context you added
• next steps and tasks, including owners and dates you entered
• people, with the roles, responsibilities, and contact details you supplied
• resources — names, links, descriptions, and access notes you typed in
• your notes, and your answers to earlier review questions

Linked resources are not opened or read. The AI receives only the resource information you entered into Hand Off.

Diagnostic records of a review may retain at least part of the request and the response, and exact retention practices depend on the AI service provider. AI Review itself does not store your handoff. If you're signed in, the review results are saved with that handoff in your account.

To keep AI Review fair and affordable, the number of reviews is limited per day. To count reviews, Hand Off stores a scrambled, one-way code for your browser (from a small cookie), your network address or your account, together with the time of each review. Your address itself isn't stored. These records contain no handoff content and are deleted after 48 hours.

Downloads and copying

• The handoff PDF is built locally in your browser — nothing is uploaded to create it.
• Downloading saves the PDF to your device. On a phone, your usual share options may appear so you can choose where it goes.
• Copy handoff places the handoff content on your clipboard, ready to paste wherever you work.
• Hand Off does not automatically email or publish a completed handoff.
• Entering a recipient's name only labels the handoff. It does not send the handoff to that person.

Demo and sample data

The guided 60-second demo uses example content. It does not save its scenario into your handoffs, and it does not use AI.

The sample handoffs you may see in the workspace — Q1 Marketing Campaign and Customer Support Handoff — are intentionally provided examples, not another visitor's saved data.

Feedback

If you choose to send feedback, Hand Off stores your answers and message in a private place only the app owner can read, separate from analytics. It doesn’t attach your handoffs, sharing links, or account. Email is optional and used only to reply. To have feedback removed, email sonorandatastrategy@gmail.com.

Analytics

Hand Off uses PostHog for anonymous product and acquisition analytics, so we can see how people find the app and which parts they use.

• What's measured: pages and workspace steps reached, demo progress, creating a handoff, running an AI Review and whether it succeeded, how review questions were resolved (by type only), completing a handoff, downloading or copying it, and creating a private share link (never the link itself).
• Returning use and accounts, without linking analytics to your account: that a new account was created (and whether by email or Google), how many handoffs were imported, that a handoff was reopened in a later visit or changed after reopening, and whether it's saved in this browser or an account. No email address, account ID, or handoff ID is sent.
• An optional one-time question, “Was Hand Off helpful?”, after you complete or export a handoff. Only your choice of Yes, Somewhat, or No is recorded, plus that the question was shown.
• How visitors arrived: the referring website (address only, not the full link) and campaign tags such as utm_source. The website and campaign tags from your first visit are kept in this browser and attached to later analytics events, so we can see which sources lead to real use. Turning analytics off deletes them.
• Device type, browser, and operating system.
• Approximate country and state, worked out from your IP address while the request is processed. The IP address, city, and coordinates are not kept for analytics.
• Hand Off does not send handoff content to PostHog — no project names, recipients, people, resources, links, notes, review findings, or your answers. Workspace addresses are masked so individual handoffs can't be told apart.
• Automatic click capture and session recording are turned off. No named profile is created; a random identifier is stored in this browser to understand repeat visits.
• If your browser sends Global Privacy Control or Do Not Track, analytics doesn't start.

PostHog still receives ordinary technical information that comes with any web request. Separately, when something breaks, the hosting platform may send technical error details — not your handoff content.

A practical note

Because AI Review sends your handoff content to an external AI service, it's worth leaving out anything you wouldn't want sent to another service — highly sensitive, confidential, regulated, or secret information. Otherwise, the content you enter in Hand Off stays on your device until you decide what to do with it.