Privacy
What we collect, why, and your rights.
Last updated 16 September 2026
What we collect
We store personal data for one purpose: to deliver the product you paid for.
Your email address. Given when you buy a license or ask for nonprofit access. It is how we grant registry access and how we reach you about your purchase.
Your license token. Generated by us, tied to your email, used by the shadcn CLI to install paid components.
We do not use your email or token for anything else.
Server logs. Our host records ordinary request data — IP address, browser and OS, the pages requested, timestamps. This is how any web server works. We use it to keep the service up and to spot abuse, not to build a profile of you.
Usage information. We may use analytics or similar services to understand how the site is used. Any such service is listed under "Who else touches your data" below.
Cookies
The site may use cookies and similar technologies for essential functions, for remembering your preferences, and to understand how the site is used.
Payments
Payments are processed by Stripe. Your card details go to Stripe and never touch our servers — we cannot see them.
Stripe sends us back the parts of a purchase we need: that it happened, when, the amount, and the email you used. Stripe's handling of your data is governed by their privacy policy, not this one.
Who else touches your data
The services we run on. Each sees only what it needs:
| Service | What it handles |
|---|---|
| Vercel | hosting and server logs |
| Neon | the database — email and license token |
| Stripe | payment processing |
| Resend | sending your license email |
We do not sell, rent, or trade your information, and we do not share it for anyone's advertising.
How long we keep it
Your email and license for as long as your license is valid — it is lifetime, so that means indefinitely, because deleting it would delete your access. Server logs are kept only as long as our host retains them.
You may ask us to delete your data at any time. Deleting it removes your license access, which cannot be restored afterwards.
Your rights
Wherever you live, you can ask us to show you what we hold, correct it, delete it, or send it to you in a portable format. If you are in the EU, UK, or California, those rights are statutory — GDPR Articles 15 to 21, or the CCPA — and they include the right to object to processing and to complain to your data protection authority.
Email hello@01orbital.dev. There is no charge.
Security
Data sits on infrastructure run by the providers above, behind their access controls. Tokens are validated server-side; a revoked token stops working immediately.
No method of transmission over the internet is completely secure. If we learn of a breach affecting your data, we will notify you by email.
Children
01orbital is a developer tool and is not directed at children. We do not knowingly collect information from anyone under 13.
Other sites
Pages here link out — to GitHub, to documentation, to Stripe. Those sites have their own policies and we are not responsible for them.
Changes
If this policy changes, the updated version is posted here with a new date. Material changes affecting existing customers get an email, not a silent edit.
Questions, or a request about your data: hello@01orbital.dev