Privacy Policy

Overview

FeatureToggle runs feature management for software applications. We operate app.featuretoggle.com (dashboard), api.featuretoggle.com (read API), and featuretoggle.com (this site).

This policy covers what we collect, how we use it, and what you can do about it.

What we collect

Account data. WorkOS processes your email, name, and organization membership when you sign up. WorkOS also stores roles and invitations for people you add.

Product configuration. You create projects, features, environments, and per-environment overrides in the dashboard. We store what you enter.

API key metadata. You create API keys per environment. We store the prefix, display name, creation and revocation timestamps, and last-used timestamp. We store the full key as a SHA-256 hash only and show it once at creation.

Billing data. Polar processes subscription and payment information when you upgrade. We store your plan name, subscription status, and Polar customer identifiers from webhooks.

Usage metering. We count feature syncs and cache misses against your plan allowance. These metrics tie to your organization and billing period.

What we do not collect

FeatureToggle does not receive end-user data from your applications. Your apps call the read API with your API key. You control what your application sends and how you use feature values.

How we use data

We use collected data to run the service, authenticate dashboard sessions, enforce plan limits, process subscriptions, respond to support requests, and detect abuse.

Sharing and subprocessors

We send data to these providers to run FeatureToggle:

WorkOS handles authentication and organization management. Privacy policy: workos.com/privacy.

Polar handles subscription billing and the customer portal. Privacy policy: polar.sh/legal/privacy.

Amazon Web Services hosts our infrastructure and stores product data in DynamoDB in us-east-1. Privacy notice: aws.amazon.com/privacy.

We do not sell personal data.

Retention

We keep account and product data while your organization has an active relationship with FeatureToggle.

Revoked API keys stay stored until you delete the parent environment or project.

Contact info@featuretoggle.com to request deletion. We delete or anonymize data where we have no legal obligation to retain it.

Security

We use TLS for data in transit.

API keys are stored as SHA-256 hashes. Dashboard access is scoped to your WorkOS organization. We isolate tenant data by organization identifier on every server route.

Your choices

Update account details through your dashboard account settings.

Revoke API keys in the dashboard.

Cancel a paid subscription through the Polar customer portal.

Email info@featuretoggle.com to request access, correction, or deletion of your data.

Cookies

This marketing site does not set authentication cookies. The dashboard sets session cookies through WorkOS AuthKit to keep you signed in.

Children

FeatureToggle is not directed at children under 13. We do not knowingly collect personal data from children.

Changes

We post updates to this page with a revised date. Material changes take effect when we publish them here.

Contact

Email info@featuretoggle.com with privacy questions or requests.