Privacy Policy
Your code is yours. We have no technical ability to read, store, or transmit your files — because we never receive them.
Last updated: March 8, 20261. What We Collect
- Your files — nothing. All processing is done client-side using browser APIs. Files never leave your device.
- Email address (Pro users only). Submitted when you verify a Pro licence alongside your Gumroad license key. Used to confirm your purchase with Gumroad and stored securely in our database to enable fast re-verification across browsers and devices without contacting Gumroad again.
- Licence status. After verification, your Pro status is saved in your browser's localStorage for up to 1 year. This never leaves your device.
- Server logs. Our hosting provider (Vercel) automatically logs standard request metadata: IP address, user-agent, URL, and response status. These are not linked to your files.
2. How We Use It
We use the above data only to verify Pro licences, keep the service running, and comply with legal obligations. We do not use your data for advertising, analytics, or behavioural profiling.
3. Payments
Pro licences are processed by Gumroad. When you purchase, you're redirected to their hosted checkout — repoprep never sees your card details. Gumroad's handling of your payment data is governed by their own Privacy Policy.
5. Data Sharing
We don't sell or share your data. The only exceptions are:
- Gumroad — to confirm your purchase during licence verification.
- Vercel — our infrastructure provider, who processes request logs.
- Upstash — our database provider, who stores your verified email to support re-verification. Data is encrypted at rest and in transit.
- Legal obligations — if required by law or court order.
6. Data Retention
- Your files — never stored; processing is entirely in-memory.
- Your email — stored indefinitely in our database to ensure your Pro access is never lost, even if you switch devices or browsers. You may request deletion at any time.
- localStorage — expires after 1 year or on logout.
- Server logs — retained per Vercel's standard policy (~30 days).
7. Your Rights
Depending on your location, you may have rights to access, delete, correct, or export personal data we hold. Given how little we collect, most requests are straightforward. Email us at support@repoprep.com and we'll respond within 30 days.
8. Security
The biggest security property of repoprep is by design: your files never reach a server, so there's nothing to breach. The minimal data that does pass through our API (licence verification) is transmitted over HTTPS. Your email is stored in an encrypted database and is never exposed in API responses.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be announced on the website. Continued use after changes are posted constitutes acceptance.
10. Contact
Privacy questions or data requests? Contact us at support@repoprep.com.