Privacy Policy

1. Information We Collect

We collect information in two main ways: information you provide voluntarily when submitting content or creating an account, and technical information collected automatically as you browse.

2. How We Use Your Information

We process your data strictly for legitimate operational purposes:

• Publishing & Curation: Formatting, hosting thumbnails, and displaying your website designs to the community.
• Payment Reconciliation: Verifying successful checkouts from Whop using secure cryptographic tokens and matching submitter emails.
• Backlink Attribution: Generating outbound links with UTM tracking parameters to drive traffic and backlink attribution to your project.
• Security & Spam Mitigation: Enforcing API limits to prevent bot traffic, spam submissions, and brute-force attempts.
• Support: Responding to inquiries, update requests, or content removal notices.

3. Third-Party Service Providers

We partner with trusted third-party providers to handle specialized functions. We never sell or rent your personal contact information to advertisers.

• Whop (Payment Processing): All checkout transactions are handled securely by Whop. We do not process, store, or receive your credit card or financial account numbers.
• Cloudinary (Media Hosting): Uploaded preview images and screenshots are hosted and optimized via Cloudinary CDN for global delivery.
• Google Analytics 4: Collects anonymous aggregated traffic data to help us understand platform usage. IP anonymization is enabled.
• Cloud Hosting & Databases: Our application and PostgreSQL database run on secure cloud infrastructure utilizing TLS/HTTPS encryption.

4. Cookies & Browser Storage

We use cookies and browser storage for security and functionality:

• Essential Cookies: Secure HTTP-only cookies used for administrator authentication and CSRF protection tokens.
• Analytics Cookies: Cookies set by Google Analytics (`_ga`, `_gid`) to measure anonymous visitor traffic.
• Session & Local Storage: Temporarily holds submission IDs and single-use publish tokens in your browser (`sessionStorage` / `localStorage`) during Whop checkout redirect. These keys are removed immediately once payment is verified.

5. Data Security & Cryptography

We employ standard safeguards to keep your data secure:

• All client-server communications are encrypted via SSL/TLS (HTTPS).
• Account passwords are one-way hashed using salted Bcrypt.
• Submission publish tokens are stored as SHA-256 hashes in the database.
• Incoming payment webhooks are verified with cryptographic HMAC SHA-256 signatures.

6. Your Privacy Rights (GDPR & CCPA)

Under applicable privacy regulations (such as GDPR in the EEA and CCPA in California), you have the right to:

• Access: Request details of the personal data we hold associated with you.
• Correction: Request updates or corrections to any showcase details or link information.
• Deletion ("Right to be Forgotten"): Request the permanent removal of your submission or contact details from our database.
• Opt-Out: Disable cookies in your browser settings or opt out of Google Analytics tracking.

7. Copyright & Content Takedown (DMCA)

UI Scrapbook is an educational and curation showcase platform. All website trademarks, design patterns, logos, and screenshots remain the intellectual property of their original creators and companies.

If your website design was submitted without your consent, or if you would like it updated or permanently removed, simply send us a message at [email protected]. We honor all genuine creator removal requests promptly within 24 to 48 business hours.

8. Children's Privacy

Our platform is designed for a general audience of software professionals, web designers, and developers. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a minor has submitted personal information, please notify us and we will promptly delete it.

9. Changes to This Policy

We may update this policy periodically to reflect platform updates or changes in legal regulations. Revisions will be posted directly on this page with an updated "Last updated" date.