Privacy policy

Draft. This page has not been reviewed yet and is not in effect.

To cover: what the store collects at checkout (processed by Stripe); account email and sign-in (sign-in codes and sessions are handled by Stytch); license activations (license key and site address); update checks (key, site address, versions); opt-in setup-status reports (configuration flags and two counts, never visitor data), deleted about 400 days after a site stops reporting; email delivery (Resend); hosting (Vercel) and database (Neon); cookies (a sign-in session cookie, plus a short-lived one while a sign-in code is pending; no tracking); and contact details for requests.