Privacy

The short version

Shipbetter hosts the apps you deploy. We collect what we need to run your account and your sites, we don't sell any of it, and you can download or delete your data whenever you like. This page explains what that means in practice.

What we collect about you

• Account: your email address and a hashed password. We never see or store the plain-text password.
• Billing: handled by Stripe. We store Stripe's customer and subscription IDs, not your card number.
• Sessions: the IP address and browser user-agent of your logged-in sessions, so you can see and revoke them.
• Deploys: the artifacts you upload, paste, email, or send through the Claude connector, plus build logs and a history of your deployments. Keeping past artifacts is how redeploys never orphan your data.
• Emails you send us: if you deploy by email, we fetch that message and its attachments to build your site.

What your sites store

Each site has its own database, uploaded images, and (if you enable sign-in) its own user accounts. That data belongs to you and the people who use your site — we host it, we don't use it for anything else, and we don't look at it except to fix a problem you've reported. You can export any collection as a spreadsheet or download a full backup at any time.

If you connect your own Stripe account to charge for a site, your Stripe keys are stored encrypted and shown to you only by their last four characters. Payments happen on Stripe's pages; Shipbetter never sees a card number.

Visitor counts on your sites

Every site records raw page views. Optionally, a small beacon estimates real visitors by counting a consenting browser at most once per site per day after a page is visibly shown; known bots and prefetches are filtered out. Where consent is required, visitors who haven't consented aren't counted. These are estimates for you, the site owner — we don't build profiles of your visitors and we don't share these numbers with anyone.

Services we rely on

• Stripe — subscription billing.
• Resend — sending you email (deploy receipts, password resets) and receiving deploy-by-email messages.
• Anthropic — when a deploy needs conversion, repair, or an "edit with AI" change, the artifact is sent to Anthropic's API to do that work. Anthropic's own commercial terms govern how they handle API inputs.
• Google Ads tag — on shipbetter.net marketing pages only (not on your sites), to measure whether our ads work. You can block it with any content blocker without affecting the service.
• Cloudflare and Hetzner — DNS and the servers your sites run on.

How long we keep things

While your account is active, we keep it. After your subscription ends, your sites go offline and we keep their data for 30 days so you can come back or export it, then delete it permanently. Deleting a site yourself removes its data right away. Server logs are kept only as long as needed to run and secure the service.

What we don't do

• Sell, rent, or share your data or your visitors' data with advertisers or data brokers.
• Put tracking scripts on your sites.
• Read your sites' data except to fix a problem you've asked us to look at, or to investigate an abuse report.

We'll disclose data only if the law requires it, or to stop active harm (phishing, malware) in line with our terms.

Your choices

Export or back up your data from your dashboard at any time. To delete your account and everything in it, or to ask what we hold about you, email support@shipbetter.net and we'll do it within a few days. If we change this policy in a way that affects you, we'll email you before it takes effect.