Privacy
What we collect, why, and your rights.
Last updated 1 October 2026
What we collect
We store personal data for one purpose: to deliver the product you paid for.
Your email address. Given when you buy a license or ask for nonprofit access. It is how we grant registry access and how we reach you about your purchase.
Your license token. Generated by us, tied to your email, used by the shadcn CLI to install paid components.
We do not use your email or token for anything else.
Server logs. Our host records ordinary request data — IP address, browser and OS, the pages requested, timestamps. This is how any web server works. We use it to keep the service up and to spot abuse, not to build a profile of you.
Analytics. We count visits with Vercel Web Analytics, and it is anonymous: no cookies, no personal identifiers, and nothing that follows you from one day to the next or onto other sites. It records the page, the referring site, your country, and your device and browser type. This is the only tracking on the site.
Cookies
The site sets no cookies. Your browser's local storage remembers your light or dark choice, your package manager, your recent searches and, once your token is shown here after checkout, your license token so paid code shows on the site. All of it stays on your device.
Payments
Payments are processed by Stripe. Your card details go to Stripe and never touch our servers — we cannot see them.
Stripe sends us back the parts of a purchase we need: that it happened, when, the amount, and the email you used. Stripe's handling of your data is governed by their privacy policy, not this one.
Who else touches your data
The services we run on. Each sees only what it needs:
| Service | What it handles |
|---|---|
| Vercel | hosting, server logs and anonymous analytics |
| Neon | the database — email and license token |
| Stripe | payment processing |
| Resend | sending your license email |
We do not sell, rent, or trade your information, and we do not share it for anyone's advertising.
How long we keep it
Your email and license for as long as your license is valid — it is lifetime, so that means indefinitely, because deleting it would delete your access. Server logs are kept only as long as our host retains them.
You may ask us to delete your data at any time. Deleting it removes your license access, which cannot be restored afterwards.
Your rights
Wherever you live, you can ask us to show you what we hold, correct it, delete it, or send it to you in a portable format. If you are in the EU, UK, or California, those rights are statutory — GDPR Articles 15 to 21, or the CCPA — and they include the right to object to processing and to complain to your data protection authority.
Email hello@01orbital.dev. There is no charge.
Security
Data sits on infrastructure run by the providers above, behind their access controls. Tokens are validated server-side; a revoked token stops working immediately.
No method of transmission over the internet is completely secure. If we learn of a breach affecting your data, we will notify you by email.
Children
01orbital is a developer tool and is not directed at children. We do not knowingly collect information from anyone under 13.
Other sites
Pages here link out — to GitHub, to documentation, to Stripe. Those sites have their own policies and we are not responsible for them.
Changes
If this policy changes, the updated version is posted here with a new date. Material changes affecting existing customers get an email, not a silent edit.
Questions, or a request about your data: hello@01orbital.dev