Privacy policy

Your email address, if you submit the newsletter form. It is used to send occasional updates about Canvas UI. Nothing else is required, and no other field is stored.

Abuse prevention data. When you submit the form, your IP address is used to rate limit requests and to complete the anti-bot check. It is processed at the moment of the request and is not written to any database or logged by this site.

Aggregate traffic data. Cloudflare, which serves this site, reports totals such as page views, referring sites, and country-level location. This is derived from the ordinary web requests your browser already makes. Nothing is stored on your device for it, it is only ever seen as totals, and it is not linked to you or to any email address.

No analytics or measurement scripts of any kind run in your browser. There are no tracking cookies, no advertising pixels, no fingerprinting, no session recording, and no profiling. Fonts are served from this domain rather than a third party, and the pages you visit are not tied to your identity or used to build a profile of you.

Your data is never sold, rented, or shared for anyone else’s marketing.

A few preferences are kept in your browser’s local storage: your theme, your preferred package manager and framework for code snippets, and whether you have dismissed or completed the newsletter form. This stays on your device, is never sent to a server, and can be cleared at any time through your browser’s site data settings.

Cloudflare hosts the site, runs the form endpoint including the Turnstile anti-bot check, and provides the aggregate traffic statistics described above.

Resend stores the newsletter list and delivers the emails. Their servers are in the United States, so submitting the form transfers your email address there.

GitHub serves the public star count, which your browser requests directly. Video embeds use YouTube’s no-cookie domain and only load once you press play.

Your email address is kept until you unsubscribe or ask for it to be removed, at which point it is deleted from the list. Every email includes an unsubscribe link.

If you are in the EU or UK, the legal basis for holding your email address is your consent, given when you submit the form. You can withdraw it at any time.

You have the right to access a copy of your data, correct it, have it deleted, or object to its use. Email hello@canvasui.dev and it will be handled within 30 days. There is no account to log into and no identity check beyond the address itself.

If this policy changes in a way that affects what is collected, the date at the top of this page will be updated. The site is open source, so the full history of this page is public in the repository.

Questions about any of this can go to hello@canvasui.dev.