FAQ
Safety of untrusted HTML, EU hosting, plan limits, and pricing.
Is it safe to host pages that run their own JavaScript?
Yes. Every shared page is quarantined, not run on the main app. Each one renders inside a sandboxed iframe, served from a separate, cookieless content origin. The page's JavaScript gets a null origin: it cannot read cookies or local storage, cannot reach the app around it, and there is no login session on that origin to steal in the first place. Access control runs on the server before anything renders, and the iframe is loaded through a short-lived, signed link. The app shell itself runs under a strict Content-Security-Policy that only allows framing from ShareMyPage's own origin.
Where is my content hosted?
In the EU. Page content, the database, and serverless compute all run in
Frankfurt (eu-central-1 / fra1). Only authentication and payments use US
subprocessors, and that is covered by the EU Standard Contractual Clauses.
Page HTML is stored as private objects on managed, SOC 2-certified cloud
storage, not in a public bucket, and reading it requires a server-held
credential, so the raw bytes aren't publicly fetchable even if a link leaks.
Everything is encrypted in transit and at rest, and every database query is
scoped to your workspace.
See the full security overview for tenant isolation, identity, hardening, and compliance details beyond this summary.
What are the plan limits?
| Free | Individual | Startup | Business | |
|---|---|---|---|---|
| Contributors | 1 | 1 | Up to 25 | Unlimited |
| Built-in AI presentations / month | 3 | 15 | 75 | 250 |
| Pages | Unlimited | Unlimited | Unlimited | Unlimited |
| Max page size | 2 MB | 10 MB | 10 MB | 10 MB |
| Versions retained per page | Last 3 | Full history | Full history | Full history |
| API tokens (MCP keys) | 1 | Unlimited | Unlimited | Unlimited |
| Page view analytics | No | Yes | Yes | Yes |
| White-label branding | No | Yes | Yes | Yes |
Sending a page's whole HTML through a single MCP tool call gets awkward past
about 50 KB, regardless of your plan's size cap; use request_upload_url /
request_download_url to move large content through a direct upload or
download instead (see Pages).
How does pricing work?
Pricing is based on contributors and ShareMyPage's built-in AI. Viewers and commenters are free, and every plan includes unlimited pages and unlimited bring-your-own AI through MCP.
- Free is $0 with 1 contributor and 3 built-in AI presentations per month.
- Individual is $5/month or $39/year with 1 contributor and 15 built-in AI presentations per month.
- Startup is $25/month or $249/year with up to 25 contributors and 75 built-in AI presentations per month.
- Business is $79/month or $790/year with unlimited contributors and 250 built-in AI presentations per month.
One complete Create with AI presentation uses one credit. Fully failed generations do not count, and slide edits and theme suggestions do not use an additional credit. A one-time $7 top-up adds 25 credits to the current UTC month's workspace allowance.
An Enterprise tier is also available (custom pricing, annual contract) for teams that need SSO/SAML, a signed DPA, customer-managed encryption keys (BYOK), or audit log export; contact sales for that.
See also
- Pages for creating and updating pages.
- Access and sharing for visibility levels and invites.
- Slide decks for presentations.