Privacy

What we collect, why, and who processes it. We keep it to what running the library needs.

Draft, not reviewed by a lawyer.

Without an account#

Browsing the site, using the free registry, the markdown pages and the MCP server needs no account and no cookies from us. We count page views and a few clicks (Copy prompt, copying an install command, "Give it to your agent", pricing buttons) through PostHog, without personal data: no name, email, IP-based profile or cross-site tracking, an anonymous id that lasts only as long as the browser tab, and no query strings. If your browser sends Do Not Track or Global Privacy Control, we send nothing. Cloudflare, which hosts the site, keeps standard request logs.

Showcase submissions#

When you send the form on /showcase we store what you typed (name, email, company, role, product URL, what you use the library for, and whether we may show your logo) in our database on Cloudflare. We use it to read the submission and write back to you, and list your team only after you agree. Ask us to delete a submission at any time at hello@pixilui.com. We keep a submission for 24 months after its last update, or until you ask us to remove it at hello@pixilui.com, and delete rejected submissions within 30 days.

With an account#

  • Login: Clerk stores your email and login details and sets the session cookie.
  • Licences: we store which plan you have, its seats and its dates. Seat invites store the invited email.
  • Access tokens: we store a hash of each token, its label, and when it was last used; never the token itself.
  • Payments: the payment provider (the merchant of record) processes your payment and invoice. We never see card numbers.
  • Email: Resend delivers login, receipt and licence emails.
  • Product events: the account service records events such as a purchase or a Pro install against an internal user id, never your email, in PostHog.

Who processes data for us#

Cloudflare (hosting, database), Clerk (accounts), our payment provider, Resend (email) and PostHog (product analytics). Each processes data only to provide its service to us.

How long we keep it#

Account and licence records stay while your account exists and as long as tax rules require for purchases. Analytics events are kept for up to 12 months.

Your rights#

Ask for a copy of your data, a correction, or deletion of your account at hello@pixilui.com. Deleting the account ends any licence on it.