Fastbackr · Updated October 10, 2026

Privacy, in plain English.

Operated by OpsCom, Corp., 251 Little Falls Drive, Wilmington, DE 19808, United States. Contact: [email protected].

Who this covers

Fastbackr is a service businesses add to their websites so people can leave comments on them. This policy covers three groups: visitors to fastbackr.com, our customers who use the Fastbackr dashboard, and reviewers who leave comments on a customer’s site.

For reviewers, the customer whose site you are on decides what is collected and why; we store and process it for them as their service provider. Questions about comments you left on someone’s site go first to that site’s owner. We will help them answer.

Customers: your account

To sign up you give us your work email; your name is stored with it. A third-party email provider delivers your sign-in link, which works once and expires after five minutes. A cookie keeps you signed in to the dashboard. With each signed-in session we store the IP address and browser it came from, to protect your account. We store your project, its allowed origins and a hash of your API key, never the key itself.

In the dashboard we use PostHog, an analytics provider, to see which pages and features get used: the pages you open, the actions you take and recordings of your sessions, tied to your account. The recordings hide every piece of text and everything you type, so your keys and your reviewers’ comments never leave the dashboard that way.

Reviewers: what a comment stores

When you leave a comment on a site that runs Fastbackr, we store:

• Who you are, as the site tells us: your name, an id from that site and, if the site sends it, your email. Guests are stored with the name they typed and a random id.
• What you write: the comment and every reply.
• Where you left it: the page’s path and title, and a description of the element you clicked — its tag, label, a short excerpt of its text, ways to find it again, its position on the page and your window size.
• A screenshot, if the site turns them on: an image of the part of the page visible in your window when you post the comment. Areas the site marks private and form fields are blacked out. It is kept with our storage provider and deleted along with the comment.
• When it was posted, and who marked it Done.

Fastbackr does not record your screen or log your keystrokes. Beyond the element you comment on, it reads the page in two cases. If the site turns screenshots on, it takes the one image described above when you post a comment. And when a site update moves an element someone commented on, it sends us the structure of the surrounding part of the page — element types, class names and short fingerprints of their text, never the text itself — so we can find where the element went.

It sets no cookies on the sites it runs on. If you comment as a guest, your name and a random id stay in your browser’s local storage so the site recognizes you next time; clearing site data removes them.

To see how Fastbackr gets used, our servers count a few actions in PostHog: opening the feedback bar or the Feedback list, starting or abandoning a comment, posting a comment or a reply, changing a comment’s status and accepting or rejecting a suggested new spot for one. Each count carries a random id we give you, the project, the site and whether you are a guest — never your name, email, what you write or the page’s content. When we look for a moved element, we also log, with that id and the project, how long the search took and which spot it picked.

Visitors to fastbackr.com

This site counts visits with PostHog, without cookies and without storing anything in your browser: we see which pages are read and how many people ask for a sign-in link, not who you are. It runs no advertising trackers. If you join the updates list, a newsletter provider stores your email and sends the notes; every one has an unsubscribe link. Your light or dark theme choice stays in your browser. This site runs the real Fastbackr: comments you leave here come to us as guest comments, as described above.

Service providers

We use a hosting provider to run our servers and database, a storage provider to keep screenshots, an email provider to deliver sign-in links, a newsletter provider for the updates list, PostHog for the analytics described above, and Stripe to take payments for paid plans. They handle data only to provide those services to us.

We do not sell your data, use it for advertising, or use it to train AI models. Our team accesses customer data only to provide support you ask for, investigate security issues or misuse, or meet a legal requirement.

Security

Data travels over HTTPS. API keys are stored only as hashes. Reviewer tokens expire after one hour, and every comment is kept to the project and site it was made on. We limit how often comments can be posted.

How long we keep it

We keep a customer’s projects, comments, screenshots and reviewer records while their account is open. A screenshot is deleted with its comment. When a customer closes their account, we delete them within 30 days. Records of blocked reviewers and revoked keys may be kept to prevent misuse. Updates-list emails are kept until you unsubscribe.

Your choices and rights

Email [email protected] to see, correct or delete the data we hold about you. Depending on where you live, you may have further rights, such as to object to processing or to complain to a data protection authority. If your request is about comments on a customer’s site, we pass it to that customer and help them answer it.

Children

Fastbackr is a business tool and is not meant for children under 16.

Changes

When this policy changes in a way that matters, we update the date above and email customers before the change applies. The Terms of Service cover how you may use Fastbackr.