Skip to content

How your data stays yours

What we do to keep your team's work apart, safe and yours, in plain words.

Kept apart, and yours

  • One team can't see another

    Every record carries its team, and the database itself refuses a query for another team's rows.

  • A log nobody can edit

    Activity records who changed what. The database refuses any edit or deletion, unless the team is deleted.

  • You choose who gets in

    Roles for your team, and client access limited to one site and nothing else.

How it's protected

  • Encrypted on the way

    Every connection to Shingle and to published sites is encrypted.

  • Passwords we can't read

    Passwords are stored as Argon2id hashes, and sign-in secrets only as hashes.

  • Files encrypted, database backed up

    Stored files and backups are encrypted by our storage provider. Database backups last 30 days.

Sites kept at arm's length

A published site runs apart from the app, so it can't reach your account.

  • A separate address

    Sites live on a separate domain from the app, so a site can't ride your session.

  • Checked before it runs

    Generated code is held to a contract: no network calls, no storage, no raw HTML.

  • Reports are acted on

    Anyone can report a site. Scam and fake sites are taken offline, and the team is told why.

Common questions

Can't find your answer? Read Shingle Help or email [email protected].

Build your first site

Start from a Google listing or a few notes. Demos usually take 5–15 minutes.

7 days for $1, then $49 a month. Cancel any time.