Privacy Policy

1. Who we are

Nibware("we", "us") operates a free catalog of SwiftUI source code and an MCP server at https://nibware.dev. For anything privacy-related, contact us at help@nibware.dev. We are the data controller for the information described below.

2. What we collect, and why

• Account data - your email address, and name if you provide one. Sign-in is handled by WorkOS AuthKit; we store your email so your account, likes, saves, and submissions stay attached to you. Legal basis: performing our contract with you and legitimate interest.
• A hashed IP- for signed-out visitors we store a hashed, non-reversible form of your IP address to count the daily free copies and MCP requests, so the free limits work and to prevent abuse. We don't use it to identify you. Legal basis: legitimate interest.
• Activity - components you like, save, or submit to the community catalog. Legal basis: contract and legitimate interest.
• Site analytics - anonymous, aggregated page views (no cross-site tracking, no ad pixels). Legal basis: legitimate interest in understanding what people use.
• Support email - if you write to us, we keep the thread so we can help you. Legal basis: legitimate interest.

3. What we do not do

• We do not sell, rent, or trade your personal data. Ever.
• We do not run third-party advertising trackers or pixels.
• We do not send marketing email unless you opt in - and every email has a working unsubscribe link.
• We take no payments today, so we hold no card, billing, or purchase data.
• We do not collect anything from the code you copy. It is source you paste into your own project; it phones home to no one.

4. Cookies

We use one kind of cookie: a session cookie that keeps you signed in. No advertising cookies, no cross-site tracking cookies. Your theme preference (light/dark) is stored locally in your browser and never sent to us.

5. Who processes data on our behalf

• WorkOS - authentication (your email and sign-in method).
• Neon - our database (accounts, likes/saves, submissions, hashed usage counters), hosted in the US.
• Cloudflare - image and media delivery (R2).
• Vercel - hosting and server logs.

Each processor only receives what it needs to do its job, under its own data-processing agreement.

6. How long we keep things

Account and activity data: as long as your account exists. Hashed IP usage counters are per-day and roll over. Support email: 2 years. Analytics: aggregated, indefinitely - it contains no personal data.

7. Your rights

Wherever you live, we honor the GDPR/CCPA set of rights: access a copy of your data, correct it, delete it, export it, or object to a use of it. Email help@nibware.devand we'll resolve it within 30 days. Deleting your account removes your personal data and anonymizes anything you submitted to the community catalog.

8. Security

Traffic is TLS-encrypted end to end. Data is encrypted at rest. Sign-in secrets never touch our servers (WorkOS handles credentials). Access to production data is limited to the people who operate the service.

9. Children

Nibwareis a developer tool, not directed at children under 13, and we don't knowingly collect their data.

10. Changes

If this policy changes in a way that matters, we'll note it here and - for material changes - email account holders. The date at the top always reflects the current version.