Privacy notice

Who we are

This website is run by the author of Sitewyn. Purchases are made on CodeCanyon (Envato), Codester, Lemon Squeezy or Payhip and are processed by that platform under its own privacy policy; we never see your card details. The platform shares with us what it shares with every seller: typically your order reference, name or username and email address.

Visiting this website

The site sets no cookies. When you choose a platform on the Buy page, the site counts the click by platform, licence tier and day, without your IP address, browser details or any identifier. If analytics are switched on we use Plausible Analytics, which counts page views without cookies and without storing personal data. Our host, Vercel, keeps standard server logs (IP address, user agent, requested URL) for security and operations under its own retention.

Licence verification

When you activate an installation, it sends the platform you bought on, your purchase code or licence key, the domain it runs on, the installed version and, if you enter it, an email address to our licence service at /api/license. We check the key with that platform (the Envato API, the Lemon Squeezy or Payhip licence API, or our own record of keys we issued for Codester orders) and store a record keyed by a SHA-256 hash of the key: the platform, the order or licence id, the buyer name, username or email the platform returns, licence type and rights, support and update end dates, domain and staging domain, version, the server’s IP address (only when domain sharing is on), the time it was last seen and the last ten previous domains.

Installations then send a daily heartbeat with the hashed code, domain and version so the signed licence file stays current. We use this data to issue licence files, prevent misuse of purchase codes and answer support questions. It is kept while the licence is in use and deleted on request.

Installer telemetry

If you opt in during installation, the installer sends step timings, the product version, install mode and Node.js version. These records contain no domain, code or personal data and are deleted after 90 days.

Update checks

Installations download signed update manifests from /updates on this site. These are static files; requests appear only in the standard server logs.

Where data is stored

Licence records are stored in Upstash Redis through the Vercel integration. Rate-limit counters (by IP address) expire after about an hour.

Data inside your installation

Your Sitewyn installation runs on your server. Your customers, their sites, form submissions, orders and bookings stay in your database and are never sent to us. You are the controller of that data.

Your rights

You can ask for a copy of the licence record we hold for your purchase, or for its deletion, through the support channel of the platform you bought on or the support link on this site. Deleting the record means the installation has to be activated again.