Privacy Policy

This policy explains how Jolocky (jolocky.com) handles personal data. For any privacy question or request, email support@jolocky.com.

• Account data: your email address, and your name and profile picture when you provide them or sign in with Google or GitHub. Profile pictures you upload are stored in Cloudflare R2.
• Purchase data: payments are processed by Dodo Payments. We store the subscription and payment IDs, amount, currency, status and invoice link. We never receive your full card details.
• License and usage data: your license key, and when you install items through the CLI registry, the item name, time, user agent and a hashed (not raw) IP address. We may use this to check refund requests and to detect shared license keys.
• Security data: your IP address or license key, used briefly to apply rate limits and prevent abuse.
• Email preferences: whether you receive product update emails.

• jolocky_session: keeps you signed in (signed, HttpOnly, 30 days).
• oauth_state_google and oauth_state_github: protect Google and GitHub sign-in (10 minutes).
• Your browser's local storage keeps your bookmarks, your Pro license key for quick access, a sign-in sync flag, your theme and layout preferences, and high scores in some interactive demos.

We do not use advertising or cross-site tracking cookies.

• to provide your account, Pro access and license keys;
• to process purchases, renewals, cancellations and refunds;
• to send transactional emails such as sign-in links, license keys and renewal receipts;
• to send occasional product update emails. Account holders receive them by default and can unsubscribe at any time from the link in each email or from the dashboard; and
• to prevent abuse and keep the service secure.

We share data only with providers that run Jolocky for us:

• Supabase (database)
• Cloudflare (file storage and DNS)
• Resend (email delivery)
• Dodo Payments (payments, as Merchant of Record)
• Netlify (website hosting)
• Upstash (rate limiting)
• Google and GitHub (only if you sign in with them)

These providers may process data outside Indonesia.

We keep your data while your account exists. Deleting your account from the dashboard (Account tab) removes your profile, licenses, order history, CLI logs and uploaded profile picture from our systems. Copies in backups may remain for a limited time. Dodo Payments keeps its own transaction records as required by law.

You can access, correct or delete your data, and unsubscribe from product emails, from your dashboard or by emailing support@jolocky.com.

Jolocky is not intended for children under 13.

We will update the “Last updated” date when this policy changes, and notify account holders of material changes by email.