Privacy Policy

Last updated: December 2025

1. Introduction

Welcome to Ship Advent. This Privacy Policy explains how we collect, use, and protect your information when you visit https://shipmas-advent.com and use our free developer tools.

We believe in transparency and keeping things simple. We collect minimal data and give you full control over your information.

2. Information We Collect

Account Information

If you choose to create an account, we collect:

• Email address — used for authentication and to contact you about your account
• Name — if you provide one during sign-up
• Profile picture — if you sign in with Google

Tool Usage Data

When you use our tools, any data you input (such as text, code, regex patterns, or URLs) is processed to provide the tool's functionality. This data is:

• Processed in your browser whenever possible
• Not permanently stored on our servers
• Not shared with third parties

Privacy-First Analytics

We use our own privacy-first analytics system that is designed to comply with GDPR without requiring a consent banner. Our analytics are fundamentally non-identifying:

• No personal identifiers stored — we do not store your IP address, email, or any personally identifiable information in analytics
• Daily-rotating visitor identifiers — we use a cryptographic hash that rotates daily, making it impossible to track you across days or sessions
• IP address truncation — if your IP is processed, we truncate the last octet (e.g., 192.168.1.xxx) before any processing, then discard it entirely
• No cross-site tracking — we do not track you across other websites
• Session data is memory-only — session identifiers exist only in your browser's memory and are lost when you close the tab

What analytics data we collect:

• Pages visited and tools used (aggregated, not linked to you)
• Approximate geographic region (country level, from CDN headers)
• Device type (mobile, tablet, desktop)
• Browser and operating system type
• Referrer domain (not full URL)
• Viewport dimensions
• Timestamp (rounded to the nearest minute)

What we do NOT collect:

• Your IP address (truncated immediately, never stored)
• Cookies for analytics purposes
• Fingerprinting data
• Any data that could identify you personally
• Cross-site browsing behaviour

Legal basis (GDPR Article 6(1)(f)):

Our analytics processing is based on legitimate interests. Because our analytics are designed to be non-identifying and privacy-preserving by default, they fall under the exception for anonymous statistical data collection. This means:

• No consent banner is required
• You cannot be identified from the data we collect
• The data cannot be combined with other datasets to identify you
• Daily rotation ensures no persistent tracking

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Authenticate your account
• Send important service-related emails (e.g., security notices)
• Understand how our tools are used to make improvements
• Respond to your questions and support requests

We do not sell your data. We do not use your data for advertising. We do not share your personal information with third parties for marketing purposes.

4. Third-Party Services

We use the following services to operate Ship Advent:

• MongoDB — database hosting for account information
• Vercel — website hosting
• Resend — email delivery for authentication emails
• Google — optional sign-in provider

These services have access only to the data necessary to perform their functions and are obligated to protect your information.

5. Cookies

We use essential cookies for:

• Authentication — to keep you signed in to your account
• Preferences — to remember your settings

We do not use tracking cookies or third-party advertising cookies.

6. Your Rights and Data Control

You have full control over your data. You can:

• Access your data — request a copy of all information we store about you
• Download your data — export your account information at any time
• Delete your data — permanently delete your account and all associated data
• Correct your data — update any inaccurate information in your account settings

To exercise any of these rights, visit your account settings or contact us at masterofamber44@gmail.com. We will respond to your request within 30 days.

7. Data Security

We implement appropriate security measures to protect your information, including:

• Encrypted data transmission (HTTPS)
• Secure authentication practices
• Regular security reviews

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will permanently remove your personal data within 30 days.

Anonymous analytics data may be retained indefinitely as it cannot be linked to individual users.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the “last updated” date at the top of this page.

11. Contact Us

If you have any questions about this Privacy Policy or want to exercise your data rights, please contact us at masterofamber44@gmail.com.