Privacy Policy

1. What we collect

Account and billing. When you purchase a Pro license, Stripe collects your payment details directly — we never see or store your card number. We do receive your email address, the plan you purchased, and Stripe's customer and subscription identifiers, which we store to issue and enforce your license.

Sign-in. Pro access uses OAuth sign-in through our own authentication service, which issues short-lived access tokens. This ties your license to an email address rather than a password we manage ourselves.

Usage data. When the hosted API serves a screenshot, we record which site and file were requested, whether the request succeeded, and a one-way cryptographic hash of the license key used — never the key itself, and never in a form that can be reversed back to it. This tells us which parts of the registry are actually useful and helps us detect abuse; it is not tied to your name or email in our analytics.

Infrastructure logs. Our hosting provider, Cloudflare, generates standard edge logs (IP address, user agent, timestamp) as a normal part of serving any web request. We do not use these for tracking or advertising, and we do not sell them.

Cookies. The website does not use tracking or advertising cookies. It uses secure, functional cookies to keep you signed in and a random, CDN-only browser-session cookie to enforce public preview abuse limits. The anonymous value is not used for advertising or cross-site tracking.

2. Why we collect it

To operate the Service: to issue and check license entitlement, to process payments, to prevent abuse of fair-use limits, and to understand which sites and styles are actually useful so we know what to add next.

We do not sell personal data, and we do not use it for advertising.

3. Who we share it with

We use a small number of infrastructure providers to run the Service, each acting as a processor under their own privacy policy:

• Stripe — payment processing and billing.
• Cloudflare — hosting, our database, file storage, and edge infrastructure for the website, CDN, and API.
• Plunk — transactional email (receipts and account-related messages).

We do not share personal data with anyone else, and we do not sell it.

4. How long we keep it

License and account records are kept for as long as your license is active, plus a reasonable period afterward for financial recordkeeping. Aggregated usage data is kept indefinitely in a form that is not tied back to an individual license.

5. Your rights

Depending on where you live, you may have the right to access, correct, or delete the personal data we hold about you. To exercise any of these, email hi@swaggin.dev — we will respond within a reasonable time.

6. Children

The Service is not directed at children under 13, and we do not knowingly collect personal data from them.

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

8. Contact

Questions about this policy: hi@swaggin.dev.