Vleue operates Crate Haven and is the controller of the personal data the service processes. You can reach us at support@vleue.com.
1. Data we collect
- Account data: your name, email address, and authentication identifiers, handled through our authentication provider Clerk.
- Usage data: IP addresses, request logs, and browser or client information, collected when you use the website, the API, or the registry endpoints.
- Content you publish: crates and their metadata. The publisher identity attached to a version is part of the registry record and is visible to people who can see that namespace.
2. Purposes and legal bases
- Providing the service you signed up for: performance of a contract.
- Securing the service, preventing abuse, and keeping audit records: legitimate interest.
- Understanding how the service is used: legitimate interest. Our analytics is self-hosted, cookieless, and does not track you across sites.
3. Subprocessors
We share personal data only with the providers needed to run the service:
- Clerk Inc. (United States): authentication. Transfers are covered by the EU-US Data Privacy Framework and standard contractual clauses.
- Hetzner Online GmbH (Germany): hosting.
- Sentry (error tracking), when enabled.
We do not sell personal data. We may disclose data when required by law.
4. Retention
Account data is kept while your account exists. Server logs are kept for a limited time for security and debugging, then deleted. Published crates and the registry's audit records are kept for as long as the namespace they belong to exists, because a registry depends on its history staying intact.
5. Your rights
Under the GDPR you can request access to your data, rectification, erasure, portability, or object to processing based on legitimate interest. Write to support@vleue.com and we will process your request, including deleting your account. You can also lodge a complaint with your supervisory authority; in France that is the CNIL.
6. Security
Data is protected with reasonable technical and organizational measures, including encryption in transit and access controls.
7. Children
The service is not directed at people under 18, and we do not knowingly collect their data.
8. Changes
Changes to this policy are posted on this page with a new effective date.
9. Contact
Questions about this policy or your data: support@vleue.com.