Privacy

• Browsing the site needs no account, and no cookie follows you around.
• An account holds your name, email and how you sign in. You can delete it yourself.
• Payments go through Polar: your card details never reach us.

• Your account: name, email address, and a password (stored only as a one-way hash), or the sign-in you chose instead. With GitHub, we receive your GitHub name, email and avatar. With a passkey, only its public key, never your fingerprint or face.
• Sessions: while you're signed in, the session keeps the IP address and browser it started from, so you can see and end your sessions. Repeated sign-in attempts are counted per IP address for a short time, to stop password guessing.
• Onboarding: your answers to two questions (what you're building, what you do), to suggest where to start. You can skip them.
• Purchases: from Polar, the email, plan, amount, currency, status and invoice number of each order, so we know your license.
• The waitlist: your email address, if you join it.
• Hosted Pro dashboards: your name and email, to sign you in from this site, and whatever you add to the shared demo (see the Terms).
• Visits: page views counted without cookies (which pages are read, from which country and kind of device), never tied to you.
• Emails you send us, to answer them.

• To run your account and sign you in: needed to provide it.
• To deliver Pro and check your license: needed to fulfil the purchase.
• To send the emails you expect: sign-up codes, a welcome, receipts, and the launch email if you joined the waitlist. No newsletter unless you ask for one, and every list email tells you how to unsubscribe.
• To keep the site secure and working, and to learn which pages help: our legitimate interest.
• To keep the records tax and accounting law requires.

These companies process data for us, each only for its part:

• Vercel: hosts the site and the hosted dashboards, and counts visits.
• Our database host: stores accounts, sessions and purchases.
• Polar: checkout, payment, tax and invoices, as merchant of record.
• GitHub: sign-in with GitHub, and access to the private repository.
• Resend: sends our emails and keeps the waitlist.

Some of them are based in the United States, so your data may be processed there, under their own security and privacy commitments. We don't sell or rent personal data to anyone.

We use only cookies the site needs: the sign-in session, while you're signed in. Your browser also remembers a few settings on your device, such as light or dark mode, a closed announcement and your package manager in the docs; they never leave it. There are no advertising or cross-site tracking cookies, so there's no cookie banner.

• Your account, until you delete it. Sessions end when you sign out or they expire.
• Sign-up codes and sign-in attempt counts, for minutes.
• Purchase records, for as long as your license exists and as long as tax law requires, even after an account is deleted.
• The waitlist, until you unsubscribe or ask us to remove you.

You can ask to see the data we hold about you, correct it, get a copy, or have it deleted, and you can object to how we use it. Change your name and email in your account settings, or delete the account there; for anything else, write to hello@dashral.com and we'll answer within 30 days. These rights come from Indonesia's Personal Data Protection Law, and where they apply to you, from the GDPR and similar laws; you may also complain to the data protection authority where you live.

The site isn't meant for children under 16, and we don't knowingly collect their data.

When we change what we collect or why, we update this page and its date; for a change that matters, we email account holders first.