Privacy

Four things, and nothing else:

• Your account. Your email address. If you sign in with Google, they also confirm your name and profile picture to us.
• Your onboarding answers. What you are building, your team size, your timeline, what usually slows you down, and how you heard about us. Every one is optional to be accurate about, and you can change them later.
• Your starters. The answers you chose and the name you gave each repository, so the console can list them and let you download them again.
• Anything you report. When you send a bug report we store what you wrote, the page you were on, and your browser’s user-agent string — so we can reproduce the problem rather than ask you to describe your setup.

• No advertising, and no sharing or selling your data to anyone.
• No payment details. Nothing is charged, so nothing is collected.
• No email marketing. We only email you about your account.
• No tracking pixels or third-party scripts beyond the one analytics tool described below.

• To run your account and sign you in.
• To generate starters and let you download them again — including counting the generations each account has spent against its allowance, which starts at 5.
• To fix problems you report.
• To understand who the product is for. The onboarding answers exist for this and nothing else.

Three companies, all as processors acting on our instructions:

• Supabase. Hosts the database and runs sign-in. Your email address, your answers, and anything you report.
• Google. Signs you in, only if you choose the Google button. Confirms your email address, name and profile picture to us.
• PostHog. Product analytics and masked session recording, on by default and switchable off in Settings. Page views, in-app events, and a masked session recording. Your email address too, once you are signed in.

We use PostHog to see how the site is actually used — page views, and a recording of the session with every input value masked, so we can find what is confusing without ever seeing what you typed. It runs on every page, including before you sign in, but visits stay anonymous: PostHog is configured to keep a lasting profile only once someone signs in, not for every anonymous visit. Once you do sign in, that browser’s activity is tied to your account, so we can tell what one person did rather than counting the same visitor twice.

PostHog respects your browser’s Do Not Track signal — send it, and nothing is captured. You can also turn it off yourself, any time, from Settings → Privacy, whether or not you send that signal. Turning it off takes effect immediately and does not delete anything already recorded.

Two kinds. One is the sign-in session — it exists so you stay signed in between visits, it is set only after you sign in, and clearing it signs you out. The other belongs to PostHog: a device identifier so it can tell returning visits apart, and a short-lived session id while you are active. Neither carries advertising, and both stop being set the moment you opt out in Settings → Privacy.

Your account and its data stay until you ask us to delete them. Bug reports outlive the account that filed them, with the link to you removed — we keep the description of the problem, not who reported it.

You can ask for a copy of what we hold, a correction, or a deletion. Email hello@startersaaskit.com and we will action it. Deletion removes your account, your onboarding answers and your starter records; already-downloaded zips are on your machine and are yours to keep.

If you are in the UK or EU, these are your rights under UK GDPR and GDPR respectively, and you may also complain to your local data protection authority.

This is a developer tool and is not directed at children. We do not knowingly collect anything from anyone under 16.

If this policy changes in a way that affects what we collect or who handles it, we will update the date at the top and email account holders before it takes effect.

hello@startersaaskit.com