Privacy policy

Pasta UI Pro is run by Mentign Ltd, a company registered in the United Kingdom. Mentign Ltd is the controller of your personal data under UK data protection law. You can reach us about anything in this policy at hello@pastaui.com.

• Account details. When you sign in with Google we receive your name, email address, profile picture and Google account ID.
• Session and security data. Your IP address, browser and device details, and when you signed in, so we can keep your account secure and rate limit the registry.
• Usage data. The pages you view, the site you came from, your browser and device details, your approximate location worked out from your IP address, and clicks on the page, including when you start a checkout. We collect this with PostHog to understand how the site is used. If you are signed in, it is linked to your account.
• Purchase details. Your plan, payment status and billing email or country. Card details go straight to Stripe; we never see or store them.
• Registry token. We store only a hash of your token, never the token itself.
• Messages. Anything you send us by email.

• To run your account, deliver the components and process payments, because we need to in order to provide what you bought.
• To keep the service secure, prevent abuse and rate limit the registry, which is in our legitimate interest.
• To send occasional product updates to customers. Every email has an unsubscribe link, and receipts and account emails are sent regardless.
• To keep records we are required to hold, such as invoices for tax.

We never sell your personal data.

• Sign-in cookie. Keeps you signed in. Strictly necessary, so it is always on.
• Analytics. PostHog stores a random identifier in a cookie and in your browser's local storage so it can tell repeat visits apart. Its names begin with ph_. It does not contain your name or email address.
• Theme. Remembers light or dark mode in your browser's local storage. It never leaves your device.

We don't use advertising or cross-site tracking cookies.

We use a small number of providers who process data on our behalf and only as we instruct:

• Cloudflare hosts the site, the database and the component files. Analytics requests pass through our own Cloudflare Worker on the way to PostHog.
• PostHog stores and analyses the usage data, in the United States.
• Google handles sign-in.
• Stripe and Autumn process payments and manage plans.
• Purelymail handles our email.

Some of these providers store data outside the UK, including in the United States. When they do, the transfer is protected by the safeguards UK law requires, such as the UK International Data Transfer Agreement or an adequacy decision.

We keep your account data while your account exists. When you ask us to delete it, we do so within 30 days. Invoices and payment records are kept for six years because UK tax law requires it. Security logs are kept for a short time and then removed.

Under UK data protection law you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that is wrong.
• Delete your data.
• Restrict or object to how we use it, including for product emails.
• Send your data to you or another service in a portable format.
• Withdraw any consent you gave, at any time.

Email hello@pastaui.com from the address on your account and we will delete it within 30 days. Deleting your account ends access to the private registry. Components you already installed stay in your projects, as described in our terms.

Pasta UI Pro is a tool for developers and is not meant for children under 13. We do not knowingly collect data from them.

If we change this policy we will update the date at the top, and tell customers by email when a change is significant.