Privacy

Small product.
Small data footprint.

Last updated: 18 July 2026.

Who is responsible

Roughton, trading as AstroCanvas, is the data controller for information handled directly by AstroCanvas. The contact address is 38 Buccleuch St, Edinburgh, EH8 9LP. Privacy questions can be sent tosupport@roughton.co.

The marketing site

The AstroCanvas marketing site uses Google Analytics only after you choose “Allow analytics” in the cookie notice. Google Analytics helps us understand visits, pages viewed and broad technical information such as browser and device type. AstroCanvas does not use this information for personalised advertising. You can change your choice at any time using “Cookie settings” in the footer.

Your analytics choice is stored in your browser so the site can remember it. Standard Vercel hosting logs may also contain technical request data such as IP address, browser information and requested URL for security and reliability purposes.

The AstroCanvas package

AstroCanvas runs locally during Astro development. The current product does not upload project files, edited content or source code to an AstroCanvas service. Changes are written directly to the local project.

To activate and periodically validate a subscription, AstroCanvas sends the licence key and an anonymous machine identifier to the AstroCanvas licence API. Keygen provides the underlying licence and machine records. Neither service receives project names, paths, source code or edited content. A successful validation timestamp is stored locally to provide a short offline grace period.

Purchases

Subscription checkout, tax, receipts and transaction support are provided throughStripe Managed Payments, with Link acting as merchant of record. AstroCanvas receives the customer email address and subscription identifiers needed to issue and manage the licence. Keygen stores licence, subscription and anonymous machine identifiers. The paid Checkout Session is verified server-side before the licence key is displayed on the confirmation page.

Email updates

AstroCanvas does not currently operate a product-updates mailing list. If one is introduced later, its consent, delivery provider and unsubscribe controls will be described here before addresses are collected.

Why information is used

Analytics and product-update email are based on consent. Purchase administration, licence validation and support are used to provide the product contract. Security, fraud prevention and basic hosting logs are used where necessary for the legitimate interest of keeping the service reliable and protecting customers.

Retention and international processing

Marketing contacts are retained until they unsubscribe, after which a minimal suppression record may be kept to honour that choice. Support correspondence is normally retained for up to 24 months after the last contact. Purchase and accounting records are retained by Stripe for the periods required for billing, tax and legal compliance. Licence records are retained while the subscription or related support obligation exists. Google, Vercel, Stripe, Keygen and Resend may process information outside the UK using their applicable contractual and legal transfer safeguards.

Your choices and rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability of personal information, or object to its use. You may withdraw consent for analytics through Cookie settings and unsubscribe from product email at any time. You can also complain to theUK Information Commissioner’s Office.

Questions

Privacy and product questions can be sent tosupport@roughton.co.