Privacy Policy

Last updated September 2026

1. What we collect

Account and billing. When you purchase a Pro license, Stripe collects your payment details directly — we never see or store your card number. We do receive your email address, the plan you purchased, and Stripe's customer and subscription identifiers, which we store to issue and enforce your license.

Sign-in. Pro access uses OAuth sign-in through our own authentication service, which issues short-lived access tokens. This ties your license to an email address rather than a password we manage ourselves.

Product usage. We use PostHog for a small set of product analytics events: gallery visits, MCP setup-copy actions, checkout starts, and purchases verified by Stripe. Events include the page path without query strings or fragments, plan or setup-client metadata when relevant, and a session-only anonymous identifier. We do not send customer prompts, screenshot contents, email addresses, license keys, OAuth tokens, or payment details. PostHog does not use analytics cookies on this site, and session recordings and automatic page or click capture are disabled.

Infrastructure logs. Our hosting provider, Cloudflare, generates standard edge logs (IP address, user agent, timestamp) as a normal part of serving any web request. We do not use these for tracking or advertising, and we do not sell them.

Cookies. The website does not use tracking or advertising cookies. It uses secure, functional cookies to keep you signed in and a random, CDN-only browser-session cookie to enforce public preview abuse limits. The anonymous value is not used for advertising or cross-site tracking.

2. Why we collect it

To operate and improve the Service: to issue and check license entitlement, process payments, understand aggregate product usage, and prevent abuse of fair-use limits.

We do not sell personal data, and we do not use it for advertising.

3. Who we share it with

We use a small number of infrastructure providers to run the Service, each acting as a processor under their own privacy policy:

We do not share personal data with anyone else, and we do not sell it.

4. How long we keep it

License and account records are kept for as long as your license is active, plus a reasonable period afterward for financial recordkeeping. Cloudflare keeps infrastructure logs under its own retention settings. Product analytics are retained only while needed to understand aggregate product usage and improve the Service, then deleted or aggregated.

5. Your rights

Depending on where you live, you may have the right to access, correct, or delete the personal data we hold about you. To exercise any of these, email hi@swaggin.dev — we will respond within a reasonable time.

6. Children

The Service is not directed at children under 13, and we do not knowingly collect personal data from them.

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

8. Contact

Questions about this policy: hi@swaggin.dev.