Privacy Policy
framecn is operated by Aniket Pawar as Shadcn Labs. We collect as little as we can: browsing the site and installing free components needs no account. This page explains what we collect and which providers receive information when you use the site.
Last updated
Analytics
We use Vercel Web Analytics to count page views. It doesn't use cookies and doesn't identify you across sites; it records aggregated data such as the page, referrer, country, browser, and device type.
Advertising
The sidebar displays Carbon Ads. Loading an ad connects your browser to Carbon's network, which receives request information such as your IP address and browser headers. We do not send your account information to Carbon.
Hosting logs
The site is hosted on Vercel. Like any web host, Vercel processes request data such as your IP address and user agent to serve pages and protect against abuse, and keeps short-lived logs of those requests.
Contact form
When you submit the contact form, your name, email, inquiry type, subject, message, and email preference are sent to Shadcn Labs through FormSubmit. We use these details to respond to your inquiry and respect your email preference.
Your account
An account is only needed for framecn Pro. When you sign in we store your email address, name, and profile image (if your Google account provides one), plus session records that include the IP address and browser used to sign in. This lives in our database, hosted by Cloudflare (D1).
- Email codes are sent through Resend. We store only a hashed copy of the code, and it expires after 10 minutes.
- Google sign-in shares your basic profile with us under that provider's privacy policy. We don't get access to your repositories or contacts.
- Pro API keys are stored only as SHA-256 hashes with a short prefix for display. We can't recover a lost key; you can create a new one instead.
- Sign-in attempts are rate limited, which briefly stores request counts keyed to your IP address.
Payments
Purchases are handled by Dodo Payments, our merchant of record. Dodo collects your payment details, billing address, and tax information directly under its own privacy policy; card details never reach us. In our Cloudflare D1 database we keep the email you paid with, your Dodo customer ID, and the status of your payments, subscriptions, refunds, and disputes. Pro access belongs to the email you paid with: signing in with that email unlocks it.
Pro source delivery
Pro compositions are fetched server-side from a private GitHub repository after your API key is verified. Your personal information isn't sent to GitHub as part of that request.
Stored in your browser
A few preferences are saved in your browser's local storage and never sent to us: your theme, sound and haptics settings, preferred package manager, and CLI-or-manual install choice. A small cookie remembers whether the sidebar is open. If you sign in, a session cookie keeps you signed in.
Sharing and retention
We don't sell your data or use it for advertising. We share it only with the providers named above, as needed to run framecn, or when the law requires it. Account and billing records are kept while your account exists and as long as needed for tax and accounting obligations.
Your choices
You can ask us to export or delete your account data at any time by emailing us. Deleting your account removes your sign-in records; we keep purchase records for your email as long as needed for Pro access and tax and accounting, and Dodo Payments retains what it must keep.
Changes
If we change how we handle data, we'll update this page and the date at the top.
Contact
Questions about this page? Email hello@shadcn-labs.com or see the contact page for other ways to reach us.