Privacy Policy
Last updated: April 24, 2026
This policy explains what data we collect, why, and how we protect it. We aim to hold the minimum necessary for the service to work.
Data we collect
- Account data: email, name, password hash (bcrypt / argon2 — we never see your plaintext password).
- Usage data: the products you browse, purchase, and download, plus technical info like IP and user agent for security.
- Payment data: processed by LemonSqueezy as merchant of record. We see order status and last-4 digits but never the full card number.
- Cookies: a single httpOnly session cookie for login. No third-party tracking / advertising cookies by default.
How we use it
Strictly to operate the service: authenticating you, processing orders, enforcing VIP download quotas, paying creators, and detecting abuse. We do NOT sell personal data to third parties.
Subprocessors
- LemonSqueezy — payment processing, tax handling, receipts.
- Cloudflare R2 / AWS S3 — file hosting (product previews and downloads).
- Resend / AWS SES — transactional emails (receipts, notifications).
- Sentry — error monitoring (automatic scrubbing of PII).
Your rights
You can access, correct, export, or delete your personal data at any time from your account settings, or by emailing privacy@uihub.local. If you're in the EU/UK, you have GDPR rights (erasure, portability, objection). We respond within 30 days.
Retention
Account data is kept for as long as your account is active, plus 30 days after deletion. Order and tax records are retained for 7 years where required by law.
Children
UIHub is not intended for users under 16. If you believe a minor has registered, email us and we'll remove the account.
Questions?
Email privacy@uihub.local. We'll do our best to answer promptly.