Privacy

Small product.
Small data footprint.

Last updated: 13 July 2026.

Who is responsible

Roughton, trading as AstroCanvas, is the data controller for information handled directly by AstroCanvas. The contact address is 38 Buccleuch St, Edinburgh, EH8 9LP. Privacy questions can be sent todean@rough.ink.

The marketing site

The AstroCanvas marketing site uses Google Analytics only after you choose “Allow analytics” in the cookie notice. Google Analytics helps us understand visits, pages viewed and broad technical information such as browser and device type. AstroCanvas does not use this information for personalised advertising. You can change your choice at any time using “Cookie settings” in the footer.

Your analytics choice is stored in your browser so the site can remember it. Standard Vercel hosting logs may also contain technical request data such as IP address, browser information and requested URL for security and reliability purposes.

The AstroCanvas package

AstroCanvas runs locally during Astro development. The current product does not upload project files, edited content or source code to an AstroCanvas service. Changes are written directly to the local project.

To activate and periodically validate a subscription, AstroCanvas sends the licence key and an anonymous machine-instance identifier directly to Lemon Squeezy. It does not send project names, paths, source code or edited content. A successful validation timestamp is stored locally to provide a short offline grace period.

Purchases

Subscription checkout, tax, receipts, licence delivery and the customer billing portal are provided byLemon Squeezy as merchant of record. Purchase information is handled under Lemon Squeezy’s privacy terms.

Email updates

If you join the product-updates list, Resend stores your email address and manages delivery and unsubscribe preferences. The list is used for AstroCanvas product news, release notes and practical Astro editing guidance. You can unsubscribe from any message.

Why information is used

Analytics and product-update email are based on consent. Purchase administration, licence validation and support are used to provide the product contract. Security, fraud prevention and basic hosting logs are used where necessary for the legitimate interest of keeping the service reliable and protecting customers.

Retention and international processing

Marketing contacts are retained until they unsubscribe, after which a minimal suppression record may be kept to honour that choice. Support correspondence is normally retained for up to 24 months after the last contact. Purchase and accounting records are retained by Lemon Squeezy for the periods required for billing, tax and legal compliance. Google, Vercel, Lemon Squeezy and Resend may process information outside the UK using their applicable contractual and legal transfer safeguards.

Your choices and rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability of personal information, or object to its use. You may withdraw consent for analytics through Cookie settings and unsubscribe from product email at any time. You can also complain to theUK Information Commissioner’s Office.

Questions

Privacy and product questions can be sent todean@rough.ink.