This policy explains what personal data LVTD LLC collects when you use shiprust.com, why, and what you can do about it. We collect as little as we can and never sell it.

What we collect

Account data. Your email address, an Argon2id hash of your password (never the password itself), your optional name and profile picture, and, if you enable them, passkey public keys and an authenticator-app secret. If you connect Google, we store your Google account identifier and receive your email and its verification status. Google-only accounts do not require you to create a password.
Projects and API keys. The names and options of projects you generate, and hashes of personal API keys you create.
Forum posts. Questions, replies, and your profile name are visible to paying members and our team. Your email address is not displayed alongside posts.
Payments. Stripe handles your card details; we only store the Stripe checkout reference and when you paid.
Sessions and security. A session cookie that keeps you signed in, and short-lived hashed request identifiers used to rate-limit sign-ups.
Usage and errors. Pages viewed, product events (such as sign-up, purchase and download), performance metrics, error reports and session replays with all text and inputs masked.

Who processes it

We share data only with the services that run ShipRust:

Google to verify your identity when you choose Google sign-in. We request identity and email access only, and do not retain Google access or refresh tokens.
Stripe for payments.
Mailgun to send verification and receipt emails.
PostHog for product analytics (linked to your account email once you sign in).
Sentry for error tracking, performance monitoring and masked session replay.
Cloudflare R2 to store profile pictures.
jsDelivr to deliver the code of the interactive API reference, which sees your IP address when you open it.
Our hosting provider, which runs our servers and database.

Cookies and local storage

We use essential cookies for your session, email verification, two-factor challenges, and temporary Google sign-in state. Analytics and error monitoring store an anonymous identifier in your browser, and your light or dark theme choice is saved in local storage. We do not use advertising cookies.

How long we keep it

Account data stays until you delete your account. Unfinished sign-ups and security challenges expire within hours. Analytics and error data are kept according to the retention settings of PostHog and Sentry, and payment records as long as tax law requires.

Forum conversations remain after account deletion so replies stay useful to other members. The link to your account is removed and the author is shown as Deleted member. Personal information you include in the text remains; contact us if you want it removed.

Your rights

You can update your name, picture and password on the settings page, and delete your account there at any time, which removes your account data and projects from our database. You can also email us to access, correct, export or erase your data, or to object to analytics. Depending on where you live (for example the EU, UK or California), you may have further rights, including complaining to your data protection authority.

Children

ShipRust is not directed at children under 16, and we do not knowingly collect their data.

Changes

If we change this policy materially, we will email account holders and update the date above.

Contact

Questions about this page? Email rasul@shiprust.com.

Privacy Policy