Privacy Policy
[effective 2026-07-14 · startandship.com]
The plain-language version
This is a static site — no accounts, no tracking pixels beyond analytics, nothing sold to anyone, ever. If you buy, payment runs through Polar (we never see your card) and we receive just enough to deliver the repo. Our public revenue ledger reports totals, never anything about you.
What we collect, and when
Just visiting: standard analytics (see clause 03) and the server logs our host keeps for security — IP address, user agent, pages requested.
Buying the kit: checkout is handled by Polar, the merchant of record. We never see or store your card details. From Polar we receive your name, email address, purchase details, and the GitHub username you connect, which we use solely to deliver repository access and provide support.
Joining the free list: your email address and the background answer you select (pro coder / AI-tools builder / non-technical). Used only to send the emails you signed up for; unsubscribe works instantly and every email includes the link.
What we never do
We never sell, rent, or trade personal data. No advertising pixels, no retargeting, no data brokers, no “partners with similar offers.” The business model is selling a product, not selling you.
Analytics and cookies
We use Google Analytics 4 to understand aggregate traffic — pages visited, referrers, and events like button clicks. GA4 sets cookies and collects device identifiers and approximate location. Blocking these cookies (via your browser or an ad-blocker) doesn't break anything on this site.
Who processes data on our behalf
Vercel — hosting and server logs.
Polar — checkout, payment processing, receipts, and tax handling, as merchant of record.
GitHub — repository access for delivery.
Google Analytics — aggregate site analytics.
Beehiiv — the email list, once live.
Each processes data under its own privacy policy; we share only what each needs to do its job.
The public ledger
We publish real revenue figures — including refunds and losses — on a public ledger. Those figures are aggregates only. No names, emails, or any personally identifying detail about any buyer is ever published, full stop.
Retention
Purchase records are kept as long as needed for support, license verification, taxes, and the 14-day refund window. List emails are kept until you unsubscribe. Analytics retention follows GA4's standard settings.
Your rights
Email us to access, correct, or delete the personal data we hold about you — we honor these requests regardless of where you live (GDPR, CCPA, and the spirit of both). Note that deleting purchase records may end our ability to verify your license or deliver updates.
Children
The site and product are not directed at children under 16, and we don't knowingly collect their data.
Changes and contact
Material changes to this policy will be noted here, with the effective date above updated. Questions or data requests: hello@startandship.com