Skip to content

    Privacy policy

    What we keep about you, why, and who else sees it. Last updated 5 November 2026.

    Who we are

    themes.dev is registered at the Dutch Chamber of Commerce (KvK) under number 01129853, legal address Wierdijk 11, 9613 CB Meerstad, The Netherlands. We decide what happens with the data on this site. Questions or requests: info@themes.dev.

    Your account

    You sign in with a one-time code we email you; there are no passwords. For your account we keep your email address, your name, when you signed up and last signed in, and whether you want product emails.

    If you work in a team, we keep your organisation, its members and the invitations sent to their email addresses. Sign-in codes are stored only as a hash and deleted after a day; sessions are deleted when they expire.

    When you connect GitHub to receive a repository, we keep your GitHub user id and username, so we can invite you to the repository and remove access when a license ends. We ask GitHub for no other permissions.

    Purchases and invoices

    For an order we keep your email address and the billing details you enter: company name, address, country and VAT number. EU VAT numbers are checked with the European Commission’s VIES service, and we keep its answer.

    Payments are handled by Mollie, which receives your billing address and email address; we never see your card or bank details. Invoices are made in Moneybird, which receives the same billing details and emails you the invoice. We keep orders and invoices as long as Dutch tax law requires (7 years).

    Purchases made before our own checkout went through Lemon Squeezy. We imported those orders (email address, name and product) to give you your licenses here.

    Downloads

    When you download a product or use the package registry, we log which file, when, and a keyed hash of your network address (never the address itself), to protect licenses against sharing. This log is deleted after 90 days.

    Emails

    Account emails (sign-in codes, invitations and release notes for products you own) are sent from account@mail.themes.dev through Cloudflare Email Sending.

    Product news is sent through Postlark, our own mail service, from news.themes.dev via Amazon SES in the EU (Ireland). You get it if you bought from us or signed up on the blog; signing up on the blog asks you to confirm first. Every news email has a one-click unsubscribe link. Unsubscribing there also turns product emails off in your account, and switching them off or on in your account does the same in the list.

    Statistics and sponsors

    We count visits with Umami, which we host ourselves (analytics.madebyspin.com). It uses no cookies, respects Do Not Track and stores no personal data.

    Sponsor blocks come from Slots, our own ad service (slots.madebyspin.com). Ads are chosen by the topic of the page only; impressions and clicks are kept as anonymous daily totals, without cookies.

    Cookies

    We only use cookies that are needed for the site to work, all set by themes.dev itself: __Host-themesdev_session keeps you signed in (30 days, renewed while you use the site), __Host-themesdev_login ties a sign-in code to your browser (10 minutes), and __Host-themesdev_gh protects connecting your GitHub account. No tracking or advertising cookies.

    Where your data is

    The site, the database and the product files run on Cloudflare. Other services we use: Mollie and Moneybird (payments and invoices, both in the EU), the EU VIES service, GitHub (repository access), Amazon SES in Ireland (news emails) and Cloudflare Turnstile (to stop automated sign-in abuse). We do not sell your data or share it with anyone else.

    Your rights

    You can download everything we hold about your account from your account page. You can also ask us to correct or delete your data, or object to how we use it: email info@themes.dev. We keep what tax law requires us to keep. If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).