Privacy Policy

Who we are

Vector Vesper provides a library of React motion components. We are the data controller for the information described on this page. For anything relating to your data, write to support@vectorvesper.dev.

What we collect

Only what an account needs in order to work.

• Your email address, because it is how you sign in and how we identify your purchase.
• Profile details you choose to add — a display name, a headline, a username, a website link, and an avatar image. All optional, all editable, all removable by you at any time.
• Your favourites — which components you have hearted.
• Install records — which components you downloaded through the CLI, and when. Used to show your own activity back to you.
• Access tokens — the label you give a CLI token, when it was created, and when it was last used. The token itself is stored only as a hash; we cannot read it back, which is why a new token can only be shown to you once.
• Payment records — the amount, currency, date and reference for each transaction. See below on card details.

What we never see

Your card details. Payments are handled entirely by Lemon Squeezy, who act as merchant of record. Card numbers are entered on their systems and never reach ours — we receive only the amount, the currency and a reference for the order.

We do not buy data about you, we do not sell or share your data with anyone for marketing, and we run no advertising or cross-site tracking.

Cookies

We set session cookies only, and only once you sign in. They keep you signed in and let your session refresh; without them, accounts cannot work. There are no advertising or tracking cookies.

Our analytics set no cookies and store nothing in your browser. They record the pages you view, the buttons and links you click, the site that sent you, and your approximate city and country. You are counted with an anonymous hash, not an ID that follows you; nothing is linked to your account or your email; your IP address goes into that hash and our host uses it to estimate your city and country, but it is never stored; and we never record sessions.

Who processes your data

We keep the list short on purpose. Each of these is a processor acting for us:

• Supabase — accounts, database and avatar storage.
• Vercel — hosting, cookieless page-view counts, and the city and country estimate our analytics record.
• Resend — sends account email: sign-up confirmations and password resets. Only your address and the message itself.
• PostHog — cookieless analytics: pages viewed, clicks and where visitors came from. No session recording.
• Lemon Squeezy — payments and invoicing, as merchant of record. They hold their own record of your transaction under their own privacy policy.
• Kit — the mailing list, if you choose to join it. Only an address and, optionally, a first name. Joining is entirely separate from having an account, and leaving is a link in any email we send.

How long we keep it

For as long as you have an account. Delete your account and everything listed above goes with it — profile, avatar, favourites, tokens, install history and our copy of your payment records. It is immediate and it is not recoverable.

Lemon Squeezy keeps its own transaction records independently of us, because tax and accounting law requires it of them. Deleting your account here does not erase their copy.

Your rights

• See it — everything we hold is shown back to you on your account page.
• Correct it — profile fields are editable there directly.
• Delete it — Account Settings has a delete button. No email required, no waiting.
• Take it with you — email us and we will send you a copy of your data.

If you have an active subscription, cancel it before deleting your account — deleting here does not stop billing at the payment provider.

Changes

If this policy changes in a way that affects you, we will update the date at the top of this page. Continued use after a change means you accept it.