Privacy Policy
We respect your privacy as developers. Flagship collects only the minimal data strictly required to authenticate your account, securely process payments via Stripe, and grant you access to the private GitHub repository.
Zero advertising trackers or cookies. Anonymous cookieless telemetry via Umami.
GitHub OAuth only requests your public handle and email for repo invites.
Credit cards are handled directly by Stripe. We never store payment card data.
Full rights to export, modify, or permanently delete your account data.
01.Data Controller & Scope
02.Information We Collect
- >GitHub Account Information: We receive your GitHub User ID, public username (e.g.
octocat), name, and verified email. We do not access your private repositories. - >Billing Information: Processed directly by Stripe Checkout. We receive transaction status, email, and country code. We never touch full credit card numbers.
- >Server Audit Logs: Standard request headers and IP logs stored temporarily for DDoS prevention and rate limiting.
- >Cookieless Analytics Telemetry: Aggregated, anonymous traffic telemetry via our self-hosted Umami Analytics instance (
analytics.righi.ceo). No cookies are stored on your device, no persistent tracking identifiers are created, and raw IP addresses are hashed with a rotating salt and never recorded.
03.How We Use Your Information
To grant GitHub repository collaborator access for the boilerplate.
To send order confirmation receipts and repository setup instructions via Resend.
To maintain legally required VAT and invoice records under EU tax regulations.
04.Sub-Processors & Service Partners
Authentication provider and private repository hosting.
PCI-DSS Level 1 certified checkout and payment processing.
Transactional email delivery for purchase receipts.
Encrypted at-rest database for user session validation.
Self-hosted at analytics.righi.ceo for privacy-first, cookieless aggregate traffic analytics.
06.Your GDPR Privacy Rights
Under GDPR and international privacy legislation, you have the right to:
- > Access and export your personal account data.
- > Request rectification of any inaccurate information.
- > Request complete deletion (“Right to be Forgotten”) of your user profile.
07.Privacy Contact
To exercise any privacy rights, contact our team directly: