Privacy Policy

Last updated: 18 October 2026

This policy explains what information NateUI collects across nateui.com, our live template demos, the NateUI CLI, and the hosted MCP server, how we use it, and who we share it with. We collect only what we need to deliver our products, authenticate access, and keep the service working. No ads and no cross-site tracking.

Information we collect

  • Account and sign-in: Your email address, account creation and last-login timestamps, active web session identifiers, and short-lived hashed 6-digit verification codes (with attempt counts) when you sign in on the web or via nateui login.
  • Purchases and licenses: Order details provided by LemonSqueezy (order ID, plan SKU, Personal or Team tier, amount, currency, purchase/refund timestamps, and webhook payload), the license keys issued to you, and your Basic template selection. We never see or store your full payment card details.
  • Downloads: When you download a template archive or scaffold via the CLI, we record the license ID, user ID, artifact path, signed URL expiry, IP address, and User-Agent for delivery auditing and abuse prevention.
  • CLI machine sessions: When you sign in from the CLI, we store the machine label (such as your device hostname), a SHA-256 hash of the machine token, creation time, last-used timestamp, and revocation status, which you can manage on /sessions.
  • MCP server rate limiting: When your AI tool calls https://nateui.com/mcp, we count requests per minute keyed by your license ID (when authenticated) or client IP address (when anonymous) to enforce rate limits. We do not log or store your AI prompts or conversations.
  • Analytics and diagnostics: Basic product analytics and application error diagnostics.

How we use it

To issue and validate licenses, deliver source code and updates across the website, CLI, and MCP server, provide support, enforce rate limits and prevent abuse, and meet tax and accounting obligations.

Service providers

We share data only with service providers that help us run NateUI: LemonSqueezy (merchant of record, payments, tax calculation, and receipts), Cloudflare (Workers hosting, R2 storage, and network security), Neon (PostgreSQL database), Resend (transactional emails for purchase receipts and sign-in codes), PostHog (product analytics), and Sentry (error monitoring).

Sharing

We do not sell or rent your personal information. We share it only with the providers above to operate the service, or where required by law.

Cookies and browser storage

  • Session cookie: Keeps you signed in to your account (/dashboard, /billing, /sessions).
  • Appearance cookie (nateui_appearance): Remembers your Light, Dark, or System preference across nateui.com and live template demos (*.demo.nateui.com).
  • Local storage (localStorage): Used by the Theme Workbench (/themes) to save your in-progress theme draft and panel state locally in your browser, and by interactive template demos to hold local demo state. Local storage data stays in your browser and is not sent to our servers.

We do not use third-party advertising or cross-site tracking cookies.

Data retention

We keep account, purchase, and license records for as long as needed to provide lifetime updates and meet legal, tax, and accounting obligations. MCP rate-limit counters expire after 24 hours. You can revoke active CLI machine sessions at any time from /sessions.

Your rights

You may request access to, correction of, or deletion of your personal data by emailing support@nateui.com. Note that deleting account or license data ends your ability to authenticate Pro access and receive updates.

Contact

Questions about this policy: support@nateui.com.