We keep as little as we can.

• Your email address, when you create an account. If you sign in with GitHub, your name and avatar from GitHub too.
• Sign-in records: your session, and how you last signed in, so you stay signed in and we can keep your account safe.
• Your purchases: which plan, when, the payment reference from Dodo Payments, and whether it was refunded. We never see or store your card details.
• Your licence keys, and checks of a key when it installs Pro components, so a key only works for the person who bought it.
• Which Pro components and templates each account has installed, and when. It’s how your account page counts what you’ve tried, and how we answer refund requests fairly.
• What you send us by email, so we can reply.

• No advertising, and no ad cookies. Google Analytics’ advertising features are off.
• We don’t sell or rent your data to anyone.
• The live demos run in your browser or against a scripted demo. We don’t keep what you type into them.

Google Analytics shows us which pages people visit, which components and blocks they open, copy and install, what they search for, and when they start a purchase. That tells us what to make next. Cloudflare Web Analytics also counts visits, without cookies.

Google Analytics sets its own cookies to tell visits apart, and Google receives your IP address and browser details to do this, under its own privacy policy. You can block it with any content blocker, or with Google’s opt-out add-on, and the site works the same.

A few services process data for us, only to do their part:

• Dodo Payments takes payment as the merchant of record: your payment details, billing address and receipts are handled by them, under their privacy policy.
• Cloudflare hosts the site, keeps standard request logs such as IP addresses to keep it running and secure, and counts visits in aggregate for our traffic numbers.
• Google Analytics counts visits and what people open, copy and buy, as described above.
• Turso stores our database: accounts, purchases and keys.
• Resend sends our emails: sign-in links and messages about your purchase.
• GitHub, only if you choose to sign in with it.

Our own cookies keep you signed in. Google Analytics sets its own to tell visits apart, as described above. Your browser also remembers small preferences, like light or dark mode, and your package manager.

Your account stays until you ask us to delete it. Purchase records are kept as long as tax and accounting rules require, even after an account is deleted. Request logs are kept only briefly by our hosting provider.

Write to hello@detentui.com from the address on your account and we’ll send you a copy of what we hold, correct it, or delete your account. We’ll answer within 30 days, usually much sooner.

Deleting your account also stops your licence keys from working.

If this policy changes in a way that matters, we’ll update the date above, and email you if you have an account.