Privacy Policy

Overview

Shiplog is a changelog service for developers. It lets you create apps, publish product updates, host public changelog pages, and embed an updates widget in your own products. This policy explains what data we collect, why, and how it is handled.

Data we collect

Account information. When you sign up we store your name, email address, and profile image. If you sign in with GitHub, we receive the basic profile data GitHub shares with us. Authentication is handled by Better Auth.

Content you create. App names, slugs, descriptions, logo URLs, and the updates you write and publish. Published content is public by design: that is the point of a changelog.

Payment data. Paid plans are one-time purchases processed by Polar. We never see or store your card details. We keep the order and customer identifiers Polar gives us so we can grant and revoke plans.

API credentials. If you generate API keys, we store only a cryptographic hash of the key, its name, and usage metadata such as request counts and last-used time. The full key is shown once at creation and never stored.

Product analytics. We use PostHog to understand how the product is used and to capture errors. PostHog may record events such as pages viewed, features used, and technical details like browser type and IP address. When you are signed in, this activity may be associated with your account name and email. Analytics requests are proxied through our own domain.

Reader tracking. The embeddable widget and public changelog pages generate a random anonymous ID stored in the visitor's browser localStorage (shiplog:anonymous-id). It is used to count unread updates and measure views, and the aggregated counts are visible to the app owner whose changelog was read. It is not linked to a real-world identity.

How we use data

• Provide and operate the service (accounts, changelogs, widgets, analytics).
• Process purchases and manage plan entitlements.
• Understand usage and improve the product via PostHog analytics.
• Debug errors and keep the service reliable.
• Send account and service-related emails.

We do not sell your data, and we do not use your content to train models.

Third-party processors

• Convex: database and backend hosting.
• Better Auth: authentication, including GitHub sign-in.
• Polar: payment processing and merchant of record.
• PostHog: product analytics and error tracking.

These processors operate infrastructure in the United States. Using Shiplog means your data is processed there.

Business transfers

If Shiplog is acquired, merges with another company, or substantially all of its assets are transferred, your data may be transferred to the acquiring party, which may continue to use it under this policy.

Retention and deletion

Your data is kept while your account is active. Deleting an app permanently removes its updates, read records, and view analytics. To delete your account and associated data, contact us and we will take care of it.

Cookies and local storage

We use cookies for authentication sessions, and PostHog stores analytics identifiers in cookies or localStorage to recognize returning visitors. The widget uses localStorage for the anonymous reader ID described above. We do not use third-party advertising trackers.

Changes to this policy

If we update this policy we will post the new version here and revise the date at the top. Continued use of Shiplog after a change means you accept the updated policy.

Contact

Questions about this policy or your data? Reach out at imtiaz@raqib.tech.