---
title: Privacy Policy
description: How Initium collects, uses, and protects your information across initium.sh and app.initium.sh.
slug: privacy-policy
order: 1
lastUpdated: 2026-07-06
---

# Privacy Policy

This policy explains what information Initium collects when you use the marketing site at `initium.sh`, the app at `app.initium.sh` (the Style Builder, Strategy Builder, and Blocks browser), and the Initium registry, and what we do with it.

The short version: Initium does not require an account, does not use tracking cookies, and collects as little as possible. Purchases are handled by Polar, our merchant of record, so we never see your payment details.

## Information We Collect

**Usage analytics.** We use Vercel Analytics to understand aggregate traffic — page views, referrers, approximate location derived from IP, device and browser type. It is cookieless: it does not use cookies or persistent identifiers and does not track you across sites.

**Server logs.** Like any web service, our hosting provider (Vercel) processes IP addresses and request metadata to serve pages and protect the service. Standard server logs are retained only for a short period.

**Purchase information.** When you buy an Initium license, checkout is handled by [Polar](https://polar.sh), our merchant of record. Polar collects your name, email address, and payment details under [Polar's privacy policy](https://polar.sh/legal/privacy). We receive your license status and order details from Polar, never your payment card data.

**License key validation.** When you install a pro item from the registry, your tooling sends your license key with the request. Our server validates it against Polar and holds a short-lived, in-memory record of the validation: a one-way hash of the key (cached for up to 15 minutes so repeat installs are fast) and a rate-limit counter keyed on IP address, hashed key, and user agent (kept for about one minute). Nothing about your installs is written to a database.

**Information you send us.** If you contact us directly, we receive whatever you include in your message.

## Information We Do Not Collect

- We do not require or offer user accounts, so we hold no account data.
- We do not collect payment card details — Polar processes all payments.
- We do not use advertising trackers, session recording, or fingerprinting.
- Your Style Builder and Strategy Builder work stays in your browser (see Local Storage below) — we do not receive or store your designs or strategy content on our servers.

## Cookies and Local Storage

**Cookies.** Initium does not set tracking or advertising cookies. Because we use cookieless analytics and have no login, the sites work without any cookie banner-worthy storage.

**Local storage.** The app uses your browser's local storage to remember preferences and work in progress — for example your Style Builder selections, Strategy Builder drafts, theme choice, and sidebar state. This data never leaves your browser; clearing your browser storage removes it.

**Shared style links.** When you share a style from the Style Builder, your selections are encoded into the link itself. Share links contain only style settings, no personal data.

## How We Use Information

- To operate, secure, and improve the sites and registry.
- To validate licenses and deliver pro registry items you have purchased.
- To understand aggregate usage so we can prioritize improvements.
- To respond when you contact us.

We do not sell your information, and we do not share it with third parties except the service providers named in this policy (Vercel for hosting and analytics, Polar for payments and license management), each acting under their own privacy terms.

## Data Retention

Analytics data is aggregate and not tied to you. License validation records live in server memory for minutes, not in a database. Purchase records are retained by Polar for as long as required for tax and accounting purposes.

## Your Rights

Depending on where you live (for example under the GDPR or CCPA), you may have rights to access, correct, or delete personal information. Because we hold almost no personal data ourselves, most requests are best directed to Polar for purchase-related data; contact us for anything else and we will help.

## Changes to This Policy

We will update this page when our practices change and revise the "last updated" date above. Significant changes will be noted in the [changelog](/changelog).

## Contact

For privacy questions, reach out via email hi@shadcndesign.com.
