Privacy policy

1. Who is responsible

Hairline UI, based in India, runs Hairline UI and decides how your data is used. For anything about your data, email support@hairlineui.com.

2. What we collect

When you create an account and sign in

• Your email address, and your name if you add one in Settings.
• The one-time sign-in codes we email you. They're stored hashed and expire after 10 minutes.
• Your sign-in sessions: when each started, the IP address and the browser it came from. A session lasts up to 60 days, or until you sign out.
• Your IP address for a short time when you request codes, to stop people flooding sign-in.

When you get or buy a template

• Which templates are in your library, how you got each one (free, bought, All-Access) and when.
• Each download: which template, which version, and when.
• Each purchase: the product, price, tax, currency, payment status, the email used at checkout and Dodo Payments' payment reference. Card and bank details go straight to Dodo Payments and never reach us.

When you browse

• Page views, through a lightweight analytics script (from c.ecompin.com): the page, where you came from, your screen size and a random visit identifier kept in your browser's storage. It doesn't use cookies and doesn't follow you to other sites.
• The usual technical logs our host keeps for security, such as IP addresses and request times.

When you email us

• Your message and email address, so we can reply.

3. Why we use it

• To run your account and sign you in.
• To deliver what you bought or claimed, and the updates to it.
• To take payments, issue refunds and keep the records tax law requires.
• To keep the site secure and stop abuse.
• To see which pages and templates people use, so we know what to improve.
• To answer you when you write to us.

We only email you sign-in codes, and messages about your account or a purchase. No newsletters or marketing unless you ask for them. We don't sell your data or share it for advertising.

4. Cookies and browser storage

• Sign-in cookie: keeps you signed in. It's needed for your account to work, so there's nothing to accept.
• Preferences: your browser remembers whether you folded the account sidebar or closed the All-Access card.
• Analytics: the visit identifier described above, in browser storage rather than a cookie.

5. Who else handles it

We use a few services to run the site. Each one only gets what it needs for its job:

• Cloudflare: hosts the site, its database and the template files.
• Resend: sends the sign-in code emails.
• Dodo Payments: runs checkout as merchant of record, handles tax, receipts, invoices and refunds. Their own privacy policy covers what you give them at checkout.
• Ecompin: the page-view analytics described above.

These services may process data outside India, including in the United States and the European Union. We may also share data when the law requires it.

6. How long we keep it

• Account, library and download history: until you delete your account.
• Sign-in codes: 10 minutes. Sessions: up to 60 days.
• Purchase records: for as long as tax and accounting law requires, even after you delete your account. They're then no longer linked to an account.
• Support emails: as long as we need them to help you, then deleted.

7. Your choices and rights

You can change your name and delete your account yourself in Settings. Deleting it removes your account, sessions, library and download history straight away.

You can also ask us to show you the data we hold about you, give you a copy, correct it, delete it or stop using it for a particular purpose. Email support@hairlineui.com from your account's address and we'll reply within 30 days. These rights apply wherever you live, including under India's Digital Personal Data Protection Act and the GDPR. If you're unhappy with our answer, you can complain to your local data protection authority.

8. Security

Data is encrypted in transit, sign-in codes are stored hashed, and template downloads are only served to signed-in accounts that own them. No system is perfectly secure, but we'll tell you promptly if a breach affects your data.

9. Children

The site is meant for people building websites professionally and isn't aimed at children under 18.

10. Changes

If we change how we use your data, we'll update this page and its date, and email account holders about significant changes.