Shipthane("we", "us", the site at https://shipthane.com) collects only what we need to deliver the services advertised on this site. This Policy explains what that is and what we do with it.
1. What we collect
Information you submit. Name, email, company, project description, budget range, and timeline when you fill out the contact form or apply for a partnership.
Payment information. When you buy a template via Stripe Checkout, Stripe collects your payment details directly. We only receive the resulting confirmation (amount, email, session ID) — full card numbers never touch our servers.
Analytics. If/when PostHog is enabled, we collect anonymized page views, click events, and broad device/browser category. No third-party advertising trackers run on this site.
Cookies. See our Cookie Policy for the full list. The short version: we set a consent preference cookie and an optional analytics cookie. No marketing cookies, no cross-site trackers.
2. How we use it
- To reply to your inquiry and deliver the work you hired us for.
- To process payments and send purchase confirmations.
- To improve the site (aggregate analytics only — never to build a profile of you individually).
- To comply with legal obligations (tax records, fraud prevention).
3. How we share it
We don't sell your data. We share only with the third-party providers that operate the site:
- Stripe — payment processing.
- Resend — transactional email delivery.
- Vercel — hosting and CDN.
- PostHog — analytics (if enabled).
Each is contractually bound to use the data only to provide their service to us, not for their own marketing.
4. Your rights
If you're in the US, EU, UK, or California, you have the right to:
- Ask what data we hold about you.
- Request deletion of that data (subject to legal record-keeping requirements).
- Opt out of analytics at any time via the cookie banner.
- (California) Opt out of any "sale" of personal data — we don't sell, so this is moot, but the right exists.
Email hello@shipthane.com to exercise any of these. We reply within 30 days.
5. How long we keep it
Contact form inquiries: 24 months after the last interaction, then purged. Purchase records: 7 years (US tax law requirement). Analytics: 14 months in PostHog.
6. Security
Site is served over HTTPS only. Data at rest is in encrypted Postgres (Supabase) and Vercel's storage. Access to production is single-person and 2FA-enforced.
7. Changes
If we materially change this Policy, we'll update the Effective Date above and add a banner notice on the home page for at least 30 days.
8. Contact
Questions: hello@shipthane.com.