Privacy Policy
Effective date: 2026-10-11
HookCrate sells skill, hook and workflow packs for Claude Code. This page says what data we hold about you, why, for how long, and how to get it removed. It is written to be read, not skimmed past.
Who is responsible
The data controller is Romas Jurevicius, Vilnius, Lithuania. Contact: support@hookcrate.com.
What we collect and why
| Data | Where it comes from | Why we have it | Kept for |
|---|---|---|---|
| Email address | Your Stripe checkout | To issue your license, find it when you lose it, and handle refunds or disputes | While your license exists, then up to 12 months for accounting and dispute windows |
| Purchase record (plan, amount, Stripe customer/subscription/session ids) | Stripe | Proof of purchase, subscription status, refunds | Same as above; Stripe keeps its own records as merchant of record |
| License key, plan, status, timestamps | Generated by us at purchase | To validate hookcrate install requests | While your license exists |
| Rate-limit counters (hashed per license key) | Our API | To stop scraping of the download endpoint | Automatically deleted after 2 minutes |
| Server logs (IP address, user agent, request path, timestamp) | Cloudflare, which hosts the site and API | Security and debugging | Cloudflare's standard retention for Workers logs; we do not export or archive them |
Install telemetry: none. The CLI contacts our API only when you run login, list, install or update, and sends only your license key and the pack id. Installed packs run entirely on your machine and never phone home.
No tracking cookies, no analytics. The site sets no cookies and loads no analytics or advertising scripts. The only third-party resource is the Tailwind CSS stylesheet from its CDN, which receives a standard HTTP request (IP, user agent) and nothing else.
Third parties
- Stripe (including Link, Stripe's saved-payment feature) is the merchant of record. Stripe collects your payment details directly; we never see card numbers. Stripe's privacy policy applies to the checkout and to any Link account you choose to use.
- Cloudflare hosts the site, the API and the license database (Workers KV) and processes requests on our behalf.
We do not sell, rent or share your data with anyone else, and we do not use it for marketing.
Your rights (GDPR)
You can ask us at any time to:
- access the data we hold about you,
- correct it,
- delete it (we will revoke the license and remove the record; Stripe retains the payment record it is legally required to keep),
- export it in a plain format,
- object to or restrict processing.
Email support@hookcrate.com from the address used at checkout. We answer within 30 days. You also have the right to complain to the Lithuanian State Data Protection Inspectorate (VDAI) or your local supervisory authority.
Where data lives
Cloudflare stores the license database in its global edge network, which includes locations inside and outside the EU. Stripe processes payment data under its own international transfer safeguards.
Changes
If this policy changes, the new version is posted here with a new effective date. We do not notify by email because we do not send marketing email.