Privacy
Privacy policy
Last updated 22 May 2026.
Shipyard is built by a solo developer. We try to collect as little as possible and tell you exactly what we do collect.
What we store.Your email address, a password (hashed, never stored in plain text), your chosen username, your timezone, an optional bio and avatar, and the projects + session notes you log. That's it.
Who can see what. Public profiles are public. Anything you mark as a Pro private project is visible only to you. Email addresses are never shown to other users.
Third parties. We use Supabase for the database + auth, Vercel for hosting, Stripe for payments (we never see your card details), Resend for sending transactional email, and Cloudflare Turnstile to keep bots out of signup. Each of these has its own privacy policy.
Cookies.We use a session cookie to keep you signed in. We don't track you across sites; we don't sell data to advertisers.
Deleting your data.Hit "delete account" in settings and everything is removed — profile, projects, sessions. No retention games.
Changes.If we ever collect more, we'll update this page and tell you in the app first.
Questions? Reach out via the contact link in the footer.