Privacy Policy

Last updated: 2026-02-21

1. Introduction

ShipSite ("we", "us", "our") is operated by MPH GL GmbH, Dammstrasse 19, 6300 Zug, Switzerland. We operate the shipsite.dev website and the ShipSite Cloud platform at app.shipsite.dev. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Data We Collect

Account data: When you sign up, we collect your name, email address, and GitHub profile information through GitHub OAuth. We do not store your GitHub password.

Project data: We access your connected GitHub repositories to build and deploy your sites. We store build logs, deployment metadata, and site configuration. Your source code is processed during builds but not permanently stored outside your GitHub repository.

Usage data: We collect anonymous usage analytics including page views, feature usage, and performance metrics to improve the platform.

Payment data: Payment processing is handled by Paddle as our merchant of record. We do not store credit card numbers or bank account details. Paddle's privacy policy applies to payment transactions.

3. How We Use Your Data

We use your data to: provide and maintain the ShipSite platform, build and deploy your sites, send transactional emails about your account and deployments, improve our services based on usage patterns, and comply with legal obligations.

4. Third-Party Services

We use the following third-party services to operate ShipSite:

  • GitHub — Source code hosting and OAuth authentication
  • Cloudflare — Edge hosting, CDN, DNS, and SSL for deployed sites
  • Neon — PostgreSQL database hosting for platform data
  • Paddle — Payment processing and subscription management
  • Vercel — Platform hosting for the ShipSite dashboard
  • Upstash — Rate limiting and caching

Each provider has their own privacy policy governing data they process.

5. Data Storage and Security

Your data is stored in encrypted databases hosted in the EU and US. We use industry-standard security measures including TLS encryption in transit, encryption at rest, and regular security audits. Access to production systems is restricted to authorized personnel.

6. Your Rights

You can access, update, or delete your account data at any time from your account settings. You can disconnect GitHub repositories and remove all associated project data. To request a full data export or account deletion, contact us at privacy@shipsite.dev.

7. Cookies

We use essential cookies for authentication and session management. We use anonymous analytics cookies to understand how the platform is used. You can disable non-essential cookies in your browser settings.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through the platform dashboard. Continued use of ShipSite after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related inquiries, contact us at privacy@shipsite.dev.