Legal

Privacy Policy

Last updated: 18 September 2026

Short version: we collect the minimum needed to take your payment and give you repository access. We don't sell data and we don't run ads. This page lists exactly what we hold and why.

01What we collect

Purchase data via Polar. Checkout runs on Polar, our payment processor and merchant of record. Polar collects your email address, billing country, payment details, and your GitHub username (which we need to grant repository access). Payment is handled entirely by Polar. We receive your email, country, GitHub username and purchase status. We never receive or store full card details.

GitHub. Your GitHub username is added as a read-only collaborator on the private IndieKit repository. This is done automatically by Polar's GitHub integration. GitHub processes this under its own privacy policy.

Support. If you email us, we keep the correspondence so we can help you and refer back to it.

This website. indiekits.xyz uses Google Analytics to measure visits and which pages people read. Google Analytics sets cookies and collects information such as your approximate location, device type, browser and the pages you visit. We use this in aggregate to understand traffic; we do not use it to identify you. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies. Our hosting provider (Hostinger) also keeps standard server logs, which include IP addresses and requested pages.

02How we use it

• To grant you access to the private repository after your purchase, and to keep that access working.
• To send your receipt (via Polar).
• To answer support requests.

We do not sell your data, share it with advertisers, or send marketing email you did not ask for.

03Processors

• Polar — payments, invoicing, merchant of record.
• GitHub — hosting the private repository and managing collaborator access.
• Hostinger — hosting this website.
• Google Analytics — website traffic measurement.

Each processor handles your data under its own privacy policy.

04Retention

Purchase records are kept for as long as required for accounting and tax purposes. Support correspondence is kept until you ask us to delete it. Because IndieKit is a one-time purchase with lifetime access, we keep your GitHub username for as long as your repository access exists.

05Your rights

You can ask us to access, correct or delete the personal data we hold about you by emailing erxconnect@gmail.com. We will respond within 30 days. Records we are legally required to keep (for example, invoices) will be retained for the required period. You can also manage your data with Polar directly through the Polar customer portal.

06Contact

Privacy questions: erxconnect@gmail.com. The data controller is ERX Connect.