Ship It Checklist

Checklists /Cloudflare /Legal

High

Say what the Worker stores

D1 rows, KV rate limits and request logs are still personal data when they contain emails or IP addresses. The privacy page should match the bindings you use, and it needs a contact address before you collect signups.

How to check

  1. Read the privacy page against the tables you actually write.
  2. If you hash an IP for rate limits, say that you store a hash for a short time, not the address itself, if that is true.
  3. Name Cloudflare as the host.
  4. Replace placeholder contact details before launch, and have the page reviewed.

Prompt

Fix prompt
Paste into Cursor or Claude Code
You are working in this repository. Do not add features.

Goal: add /privacy that describes the D1 tables, KV keys and logs this Worker writes.

Steps:
1. Read the queries and list fields you store.
2. Write the page with placeholders [TRADING NAME], [REGISTERED ADDRESS] and [CONTACT EMAIL].
3. If you store an IP, say so. If you store only a hash with a TTL, say that instead. Do not claim either unless the code does it.
4. Link the page from the footer.
5. Tell me what is still a placeholder.

This uses the same ticks as the checklist page, saved in this browser.