Privacy

Last updated 4 October 2026

Layro is one developer selling components. The honest summary is that we hold as little about you as the thing can be built with, because storing more would be work with no upside.

What is stored

• Your email address — it is how you sign in and where receipts go.
• A display name, if you set one. Optional, and only used to address you.
• Subscription and purchase records — status, dates and the Lemon Squeezy identifiers needed to match a payment to your account.
• Download history — which component, when, and whether it came from the site or the CLI. It is shown back to you on your account page; that is what it is for.
• A CLI token, so the shadcn CLI can prove it is you without a browser session.

What is never stored

• Card details. Lemon Squeezy takes the payment; they never reach us.
• Passwords. There are none — sign-in is a link to your email.
• Anything about the projects you build, or the code you write with the components.

Who else sees it

Three companies, each doing one job: Supabase stores the database and sends sign-in emails, Lemon Squeezy processes payments and is the merchant of record, and Vercel hosts the site. Nobody buys, sells or receives your data for advertising, and there is no analytics or tracking product on this site.

Cookies

One, and it holds your sign-in session. There are no advertising or analytics cookies, which is why there is no consent banner to dismiss — there is nothing to consent to.

How long

Account and purchase records are kept while your account exists, and payment records for as long as tax rules require after that. Ask us to delete your account and we will, except for the records we are legally obliged to keep.

Your rights

Ask for a copy of what we hold, ask for it corrected, or ask for it deleted. Write to layropro26@gmail.com and it gets done — there is no process to navigate, because there is no department to navigate it.