Last Updated: October 7, 2026
Popfeed ("Popfeed," "we," "our," or "us"), a division of Morgan Ventures, Inc., provides a lightweight website feedback service: site owners install a widget, visitors choose to submit feedback, and owners review it in a dashboard with alerts by email, webhook, or Slack. This Policy explains what we collect through www.popfeed.com and the Popfeed widget, how we use it, and the choices you have.
Two roles matter here. For our own website, waitlist, and owner accounts, Popfeed decides how data is used. For feedback submitted through a widget installed on someone else's website, the site owner controls that data and we process it on their behalf. If your question is about feedback you submitted on another site, the site owner is usually the right first contact, and we will help route requests we receive.
Waitlist. If you join the waitlist we store your email address and the time you joined, along with your IP address, approximate location (city, region, and country), browser and device details, and the website that referred you to us, if any. We use these to prevent abuse and to understand where interest in Popfeed comes from.
Owner accounts. Account holders may provide a name, email address, password, and settings such as widget configuration, allowlisted domains, and notification destinations.
Signing in with Google or GitHub. If you choose to create or sign in to an account through Google or GitHub, that provider asks for your permission and then sends us basic profile information: its identifier for your account, your name, your email address, and the other profile details it returns with them, such as a username or profile picture link. We use this only to create your Popfeed account and sign you in, and we keep a record of the sign-in, including those details and your IP address, for security and troubleshooting. We never receive your Google or GitHub password; we do not request access to your contacts, files, messages, or code repositories; and we do not keep the provider's access token once sign-in is complete.
Widget interactions. Information about a visitor is collected only when they interact with the widget. When a visitor opens the widget, we record that it was opened along with page context. When they choose a rating, write a message, or leave an email address, we store that response. A response includes what the visitor provided (the rating or score, any message, and any email address) and any details the host site supplies about its own signed-in users, such as a name, email address, account ID, or plan. The page context stored with an open or a response includes the page address and title, the referring page, browser and device details, screen and window size, language, timezone, an approximate location (city, region, and country, never precise coordinates), how the widget was opened and positioned, time spent on the page and scroll position, and a short list of pages viewed earlier in the same visit on pages where the widget is installed. Where the site owner has enabled it, a screenshot of the visible page is captured after the visitor interacts with the widget. We store the visitor's IP address for rate limiting, abuse prevention, and security; it is never shown in the owner dashboard, shared with the site owner, or used for advertising or cross-site tracking.
The Popfeed widget sets no cookies for visitors and does not fingerprint them, follow them across sites, record sessions or keystrokes, or build advertising profiles. Popfeed is not an analytics service: we do not count or analyze visits to pages where the widget is installed. Like any file on the web, the widget's script and settings are delivered when a page loads, and we do not use those requests to identify or follow visitors. Information about a visitor is collected only when they interact with the widget, for example by opening it, choosing a rating, or sending a message. A screenshot, where the site owner has enabled it, is taken only after that interaction and only of the visible page; it is not a recording or a full-page capture. The widget may keep a small amount of information in the browser's own storage so it works sensibly during a visit, such as not asking again after feedback has been sent.
On popfeed.com itself, we use a first-party session cookie to keep the site working and to keep account holders signed in to the dashboard, and an optional remember-me cookie. We use Google Analytics to measure how our own website is used; it sets its own cookies and sends Google usage information such as the pages viewed, approximate location, and browser and device details. It does not run on hosted feedback pages or on the pages that feedback links in emails open. Sign-in and other forms use Cloudflare Turnstile to block automated abuse. We do not use third-party advertising cookies.
We do not sell personal information, and we do not use visitor feedback for advertising.
At the owner's direction. When an owner configures notification email, webhooks, or Slack delivery, we send feedback content and its page context to those destinations. Owners are responsible for the destinations they configure.
Service providers. We use a small number of infrastructure providers to run the Services: hosting, screenshot storage, content delivery, and abuse protection (such as Amazon Web Services, CloudFront, and Cloudflare), transactional email delivery (Resend), analytics for our own website (Google Analytics), and OpenAI when an account has AI insights enabled. Screenshot links use unique, hard-to-guess URLs so they can appear in owner notifications and AI analysis without a separate login. An AI insight request includes the submitted response and relevant interaction context, which may include a host-supplied visitor name, account-user status, and an enabled page screenshot. We exclude the visitor's IP address, email address, user ID, raw browser user agent, and URL query strings. A visitor may still type personal information in the message itself or have it visible elsewhere on the page. These providers process data only to provide their services to us.
Sign-in providers. If you sign in with Google or GitHub, that provider knows you used it to sign in to Popfeed and handles your information under its own privacy policy. We do not send your feedback, settings, or other Popfeed data to the provider, and we do not use or share the profile information it gives us for advertising.
Legal and safety. We may disclose information to comply with law or lawful process, to protect the rights, safety, or property of any person, or to enforce our agreements. Business transfers. If our business is sold, merged, or reorganized, information may transfer as part of that transaction under this Policy's protections.
We retain waitlist entries until launch outreach is complete or you ask us to remove you. We retain account data and feedback submissions for as long as you have an account with us. Owners can archive submissions in the dashboard, and we honor verified deletion requests as required by applicable law. When data is deleted, copies may persist briefly in backups before rolling off.
You may request access to, correction of, or deletion of your personal information by contacting us; we respond as applicable law requires. Owners may opt out of product-update email and may disable AI insights in Settings; disabling AI insights stops new generation and removes stored insights. We may still send non-promotional service messages about an account, security, or delivery. If you signed in with Google or GitHub, you can remove Popfeed's access at any time in that provider's account settings; this stops future sign-ins through it but does not delete your Popfeed account or its data, which you can ask us to do. If you submitted feedback on a website that uses Popfeed, the site owner controls that record; we will direct your request to them where required, and assist with fulfillment.
We take reasonable technical and organizational measures to protect information. Widget requests are validated and limited to the websites an owner has approved, deliveries to an owner's systems are signed so they can be verified, visitor IP addresses are used only for security and abuse prevention and are never exposed in the owner dashboard, and dashboard access requires authentication. No method of transmission or storage is completely secure, so please protect your account credentials and use a unique password.
We store and process information in the United States. If you use the Services from elsewhere, you understand your information will be transferred to and processed in the United States.
The Services are not directed to children. If you are under 18, or the age of majority where you live, use the Services only with the consent of a parent or legal guardian.
We may update this Policy from time to time. When we do, we will revise the "last updated" date at the top of this document. Your continued use of the Services after changes are published means you accept the revised Policy.
Questions or requests about privacy? Contact us and we will respond as required by applicable law.
Terms of Service · Privacy Policy · Contact Us
© 2026 Popfeed, a division of Morgan Ventures, Inc. All rights reserved.