Privacy Policy

About this policy

TesseraUI ("we" or "us") runs tesseraui.in. This page explains what we collect when you use the site, why we collect it, and what you can ask us to do with it. If anything here is unclear, email sumit@tesseraui.in.

You don't need an account

You can browse every component, watch the recordings and copy the free ones without signing in or giving us your email. You only need an account to buy something. You can create one by signing in with Google or GitHub, or with a code we send to your email.

What we collect

Your account. When you sign in with Google or GitHub, they share your name, email address and profile photo with us, and that becomes your account. If you sign in with an email code, we keep your email address and use the part before the @ as your name. We never store the code itself, only a scrambled version of it, and it stops working after 5 minutes.

Each time you sign in, we also keep a session, which records when you signed in, plus the IP address and browser you used. This keeps you signed in and helps us spot abuse.

What you buy. We keep a record of each purchase on your account: what you bought, when you bought it, and the payment or subscription reference. That's how your purchases show up wherever you sign in. We never see or keep your card or bank details.

How you use the site, if you say yes. We use PostHog to see which pages and components people look at, so we know what to build next. It records the pages you visit, what you click, which site sent you here, your browser and device type, and roughly where you are. On your first visit, we ask whether analytics can use cookies, and nothing is recorded until you answer.

If you say yes, PostHog saves an ID in a cookie so it recognises you next time. If you're also signed in, we send PostHog your account number, name and email so your visits are linked to your account.

If you say no, PostHog doesn't set any cookies or save anything on your device. It still counts the visit, using your IP address and browser details to make an anonymous ID on its own servers, and that ID is never linked to your account.

You can change your mind any time with Cookie settings at the bottom of every page.

Payments

Dodo Payments handles payments for us as our merchant of record. They take the payment, add any sales tax or VAT, and send you the receipt. We give Dodo your name, email address and account reference so the payment lands on the right account. Your card details stay with Dodo and are covered by their privacy policy.

What we don't do

We don't use ad trackers or tracking pixels, and analytics cookies are only set if you say yes. When you sign in, we set a couple of cookies that keep you signed in and protect your sign-in from forgery, and they aren't used for anything else. Cloudflare, our host, may also set a cookie that helps tell real visitors apart from bots.

We don't record your screen or what you type.

We don't load fonts from Google. Our fonts come from our own domain, so opening a page doesn't send your details to a font service.

We never sell, rent or trade your information.

Why we use it

We use your account to sign you in and give you what you've bought. We use the analytics only to learn which parts of the site are useful and make it better. We won't add you to a mailing list or send you marketing you didn't ask for.

Who else handles it

A few services help us run the site. Cloudflare hosts the site and stores your account and purchase records. Google and GitHub handle sign-in, Resend sends the email codes, and Dodo Payments handles payments. PostHog processes our analytics on its servers in the United States. Cloudflare, Resend and PostHog only work on our behalf. Other than that, we only share your information if the law makes us.

Like any website, our servers may keep short-lived technical logs, such as IP addresses and the pages people request. We use them to keep the site running and protect it from abuse.

How long we keep it

Your account and purchase records stay until you delete your account. A session ends when you sign out, or 30 days after your last visit. Dodo keeps its own payment records for as long as tax and accounting laws require.

Where it's stored

The services we use run in different countries, so your information may be stored or handled outside the country you live in, including in the United States. We only work with well-known providers who protect your data under their own data protection terms.

How we keep it safe

Every connection to the site is encrypted, sign-in codes are only stored in scrambled form, and only the people who run TesseraUI can see account records. No system is perfectly secure, but if your information is ever caught up in a breach, we'll let you know.

If TesseraUI is sold

If TesseraUI is ever sold or merged with another business, your account and purchase records may go to the new owner. They'll have to keep following this policy for the information they receive.

Your choices

You can turn analytics off any time with Cookie settings at the bottom of every page. You can delete your account yourself from your account page, which removes your account, sessions and purchase records from TesseraUI.

You can also ask us to show you what we hold about you, fix it or delete it. Just email sumit@tesseraui.in. Depending on where you live, laws like the EU's GDPR or India's Digital Personal Data Protection Act give you these rights, but we'll honour them wherever you are.

Children

TesseraUI is built for developers and isn't meant for children. We don't knowingly collect information from anyone under 18.

If this policy changes

If we change what we collect or how we use it, we'll update this page and the date at the top before the change happens. If it affects how we use information you've already given us, we'll tell you first.