Privacy Policy

• Account details: your name and email address. If you sign in with Google, we also receive your Google profile picture and Google's confirmation that your email is verified.
• Password: stored only as a one-way hash. We never see or store the password itself. Google accounts have no password with us.
• Sessions: when you sign in, we record the IP address and browser of that session so you stay signed in and we can spot misuse.
• API keys: stored as hashes, plus the first few characters so you can tell keys apart.
• Install activity: when the shadcn CLI or an AI tool installs a component with your key, we record which component, when, and with which key. It powers your Usage page.
• Purchases: your plan, its status and your payment history. Card details are handled entirely by our payment provider; we never receive them.
• Emails you send us: if you write to hello@lodeui.com, we keep the conversation to answer you.

• To create and secure your account, and to confirm your email and reset your password.
• To check your license when you install Pro components.
• To take payments, issue invoices and handle refunds.
• To send emails you need, like sign-up confirmations, password resets and receipts. We don't send marketing email without asking first.
• To prevent abuse, for example by limiting repeated sign-in attempts.

We use a small number of providers, each only for its job:

• Vercel hosts the website and app.
• Neon hosts our database (United States, AWS us-east-1).
• Resend sends our emails.
• Cloudflare provides our domain, DNS and email forwarding.
• Google handles “Continue with Google” if you choose it.
• Dodo Payments processes payments as our merchant of record, including taxes and invoices.

Your data may be processed in the United States and other countries where these providers operate.

• Session cookie: keeps you signed in. Without it, accounts can't work.
• Preferences in your browser: your theme (light or dark), your package manager choice and recent searches. These stay on your device and are never sent to us.
• We don't use advertising or cross-site tracking cookies.

• Account data stays while your account exists.
• Sessions expire on their own after a period of inactivity.
• Payment records are kept as long as tax and accounting law requires, even after an account is deleted.

• See and correct your details in Dashboard → Settings.
• Delete your account yourself in Dashboard → Settings. This removes your profile, sessions and API keys.
• Ask for a copy of your data, or ask anything else, by emailing hello@lodeui.com. We reply within 30 days.

Everything travels over HTTPS, passwords and API keys are hashed, and database connections are encrypted. No system is perfectly secure; if something goes wrong that affects your data, we'll tell you promptly.

Lode is a tool for developers and isn't meant for children under 13. We don't knowingly collect their data.

If we change how we use your data in a meaningful way, we'll update this page and email account holders before the change takes effect.