Privacy Policy

Who we are

Shadcn UI Blocks runs shadcn-ui-blocks.com, the app you sign in to, the registry the shadcn CLI installs blocks from, and the MCP server. This policy covers the information we handle across all of them. Questions about it can go to support@shadcn-ui-blocks.com.

What we collect

• Account details. Your email, your name, and a password we store only as a secure hash. When you sign in with Google, the name, email and picture Google shares with us.
• What you create. Workspaces and their members and invitations, Designer files, lists, block requests, and API keys, which we keep only as a hash and a short prefix.
• Billing records. Your plan, orders and invoices, and the customer record Stripe keeps for you. Card details go to Stripe directly and never reach our servers.
• Usage. The pages you visit, what you copy, install or download, the searches you run, the MCP tools your editor calls, and the days you use the app.
• Device and security. The IP address and browser behind each signed in session, which you can see and sign out in Security settings, and bot checks on our sign in forms.
• Messages. Whatever you send us through the support form or by email, with the name and address you send it from, and our replies to you.

How we use it

We use this information to run your account and keep it secure, to deliver the blocks, templates and tools your plan or purchase covers, to take payments, to send the emails the service depends on (password resets, email changes, team invitations), to answer you when you write to us, to prevent abuse, and to understand which parts of the product people use so we can improve them.

We do not sell your personal information, and we do not use it for advertising.

Sign in with Google

If you choose to sign in with Google, Google shares your name, email address and profile picture with us, and confirms that the email address is yours. We use them only to create your account, sign you in, and show your name and picture in the app. We do not request access to your Gmail, contacts, files or any other Google data, and we do not share what Google gives us with anyone beyond the providers listed below that run the service.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect Google from Security settings once your account has a password, and you can remove our access at any time from your Google account.

Who processes it for us

We rely on a small set of providers, each handling only what its job needs:

• Vercel hosts the site and stores files such as Designer thumbnails.
• Turso hosts the database that holds your account and your content.
• Stripe processes payments and keeps the records for your plan.
• Resend delivers our account emails and the messages sent from the support form.
• Google provides sign in with Google and Google Analytics.
• Cloudflare runs Turnstile, the bot check on our sign in forms.
• Anthropic reads the text of a block search to work out what you meant.

We may also disclose information when the law requires it, to protect our rights or the safety of others, or as part of a sale or transfer of the business, in which case this policy continues to apply to it.

Cookies and local storage

We set a cookie that keeps you signed in, and a short lived one while a Google sign in is in progress. Google Analytics sets its own cookies to count visits. Your browser's local storage remembers preferences such as the theme. You can block cookies in your browser, though signing in needs the session cookie to work.

How long we keep it

We keep your account information for as long as your account is open. Sessions end when you sign out or when they expire. Billing records are kept for as long as tax and accounting rules require. When you ask us to delete your account, we remove your information within a reasonable period, apart from what the law requires us to keep.

Your choices and rights

You can change your name, email and password, and sign out other devices, from your settings at any time. To see a copy of your information, correct it, or delete your account, email support@shadcn-ui-blocks.com and we will respond within 30 days.

Depending on where you live, you may have further rights, such as objecting to or restricting how we use your information, or complaining to your local data protection authority. Write to us and we will help you exercise them.

Security

Everything travels over HTTPS, passwords and API keys are stored only as hashes, and access to production data is limited to the people who run the service. No system is perfectly secure, so if you believe your account has been compromised, contact us right away.

Where your information is processed

Our providers may process your information in the United States and other countries whose data protection laws differ from yours. We use providers that protect it to the standard this policy describes.

Children

Shadcn UI Blocks is not meant for children under 13, or under 16 where the law sets that age, and we do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

When we change this policy we update the date at the top of this page, and when a change is significant we tell you by email or in the app before it takes effect.

Contact

For anything about your privacy or this policy, email support@shadcn-ui-blocks.com.