Favorites

Privacy Policy

Last updated: September 29, 2026

Favorites is a speed-dial page. The free app keeps everything in your browser. Favorites Pro — the $3/year subscription sold on this site — adds a sync token so several devices can share one set of favorites. This page is written from the Worker that runs favoritespage.us, not from a template.

The short version. This Worker never stores your favorites content. In KV it writes only token:<sha256> → sync_user_id mappings, and it must never touch state:* keys (that is where the app itself stores the JSON document). Licence rows live in D1. Payment happens at Stripe—we never see a card number. Named recipients: Stripe, mailer.thompsonblack.us, MailerLite, and self-hosted Plausible.

1. Who this covers

This policy covers favoritespage.us—these marketing pages and checkout—and the Favorites Pro sync credential those pages sell. The Favorites app itself is a separate, open-source application at app.favoritespage.us.

The service is run by Michal Ferber, trading as TechGuyWithABeard, a business of ThompsonBlack LLC, hosted on Cloudflare. Postal mail: ThompsonBlack LLC, PO Box 3071, Florence, SC 29502, United States.

2. Visiting this site

You can read every page here without an account, and we set no cookie for doing so.

We measure traffic with Plausible on our own server at plausible.thompsonblack.us. It is cookieless. Cloudflare processes requests, including IP address, as our host.

3. Starting a subscription

Checkout is Stripe Checkout. Card details never reach our servers. Stripe collects email, name, and payment details under its own privacy policy.

When a subscription is created, Stripe notifies this Worker and we record a licence in Cloudflare D1: licence key, email and name as Stripe collected them, status and dates, Stripe customer and checkout ids, a random sync_user_id, and a SHA-256 of the current sync token. We do not store your card, billing address, or Stripe invoices.

Your email address. When you buy or start a trial, Stripe gives us your email address. We use it to send your license, receipts, and account notices; to answer you; and now and then to thank you or tell you about our other products. Every email that isn't about your account has a one-click unsubscribe, and we never sell or rent your address, and we share it only with the providers named on this page.

Emails about our other products are sent through MailerLite, which keeps your address only to deliver them and to honor your unsubscribe. MailerLite's handling of your information is described in its own privacy policy.

4. Managing your license

This site has no sign-in. You manage or cancel your subscription at account.tgwab.us, our shared account service, which signs you in with the email address on the subscription.

The app has no accounts.

5. Your sync token — what this Worker writes to KV

Your sync token is your license key. We email it to you when the subscription starts and keep it on your license row (section 3); we do not log it. What this Worker keeps in KV is:

token:<sha256(token)> → sync_user_id

That mapping is how the app authenticates a sync request. This Worker must never touch state:* keys. Those keys hold the app's JSON document of favorites and settings, written by the app itself under the same KV namespace. Expiry or revocation deletes the token: mapping (sync stops) and leaves state:* alone so a resubscribe with the same sync_user_id picks the document back up.

6. Email

Transactional mail (welcome, receipt, renewal reminder, ended) comes from Favorites Pro via our mail service at mailer.thompsonblack.us, which hands the message to Forward Email for delivery. Emails about our other products go through MailerLite (section 3).

7. Who else sees information

  • Cloudflare — hosts the Worker, D1, and KV.
  • Stripe — payment, subscription, customer billing portal.
  • mailer.thompsonblack.us (and Forward Email) — transactional mail.
  • MailerLite — emails about our other products.
  • Self-hosted Plausible — aggregate page views, not people.

We do not sell your data. We may disclose information if the law requires it.

8. Your choices

Skip the token and the app never contacts our servers. Cancel through Stripe's billing portal linked from account.tgwab.us. Ask us to delete your licence row, token mapping, and (via the app's own export/delete) the synced document — write through the contact form from the email on the subscription.