Privacy Policy

If you buy: your email address, your plan, your purchase reference from our payment provider, and the registry token we generate for you. Payment details (card, mobile money) are handled entirely by the payment provider — they never touch our servers.

If you sign in: a session cookie (strictly necessary, no consent banner games) and standard technical logs (IP, user agent) kept briefly for security.

If you just browse: your builder compositions and preferences (theme, package manager) live in your browser's localStorage — they are never sent to us.

Verifying licenses, signing you in by magic link, providing pro content through the registry and MCP, and answering your support emails. That's the whole list. We don't sell data, share it with advertisers, or profile you.

License and account data are stored in our database (hosted in the EU/US by our infrastructure providers). Transactional emails (magic links) are sent through our email provider. Each provider only receives what it needs to do its job.

Write to us to access, correct or delete your data at any time. Deleting your account removes your email and session data; we keep the minimal purchase record required for accounting. You can regenerate your registry token by contacting support if it ever leaks.

If this policy changes materially, we'll note it in the changelog and on this page's date. No silent edits.