Privacy
kit.dev holds the account you use on shadcn.io and kit.dev, and runs the products behind it. This is what it keeps, why, and what you can do about it.
Last updated November 2026
Who we are
kit.dev ("we", "us") is the company behind shadcn.io, Neobrutalism and grokbots.ai. This policy covers kit.dev itself: your account, your sign-ins and the pages at kit.dev. Each product's own privacy policy covers what you do on it.
What we keep
When you create an account or sign in, we keep:
- Your email address, and the name and picture your Google or GitHub account gives us, if you sign in with one
- The ways you sign in: Google, GitHub, or a link sent to your email
- Your sessions on each product: when each started, the device and browser, the IP address, and the country it came from
- A record of each sign-in: which product, which way, when, the IP address, the country and the browser
- Which product you joined on, and when you last signed in
On each product, your profile there (your plan, your workspaces) is kept in that product's own database.
Why we keep it
To sign you in on every product with one account, to show you where you're signed in, to let you end a session you don't recognize, and to keep your account secure.
When our team changes something on your account (an edit, Pro given or taken back, a deletion), we record who did it, when and why, so every change can be explained.
We don't sell your data and don't use it for advertising.
Cookies
kit.dev sets only the cookies signing in needs:
- Your session: keeps you signed in for up to 7 days
- kit-signed-in: tells our pages you're signed in, so they can show “Your account”; it holds no data about you
- The way you last signed in, for 30 days, so the sign-in page can suggest it
kit.dev runs no analytics and no advertising cookies.
Who processes it
We use a few services to run kit.dev:
- Google and GitHub, when you choose to sign in with them
- Resend, to send the sign-in links you ask for
- Cloudflare, which delivers our pages and tells us the country a request comes from
- Stripe, which takes the products' payments; kit.dev reads Stripe's records of them to support you and keep each plan right
- Our own servers, where the databases run
Each has its own privacy policy.
Keeping and deleting it
We keep your account while you use it. You can delete it at any time on Your account: “Delete my account everywhere” removes your account and your profile on every product. A subscription that would charge again has to be cancelled on its product first. Records of payments stay with Stripe.
Your rights
You can see what we hold about you on Your account, correct it, delete it, or ask us for a copy.
Write to contact@shadcn.io for anything else.
Children
kit.dev isn't meant for children under 13, and we don't knowingly keep data about them.
Changes and contact
We'll post any change here and update the date at the top. A significant change will be announced on the site.
Questions: contact@shadcn.io.