Privacy Policy


Effective date: October 29, 2026

Jerbix ("we" or "us") operates www.jerbix.site. This policy explains our handling of personal information when you browse, register, buy source-code products, or contact us. Operators of their own deployments of Jerbix source code must provide their own privacy information; this policy does not cover their services.

What we collect

Depending on the features you use, we process:

  • Account information: email, display name, verification status, and creation and update times. Passwords are stored as hashes, not plaintext.
  • Sign-in and security information: session identifiers, sign-in times, session expiry, and IP addresses and browser/device information associated with sessions. API-key use also involves key identifiers, permissions, and usage records. Keep your keys secure.
  • Order and payment information: purchaser account, product and price identifiers, amounts, currency, payment status, payment-provider customer and transaction identifiers, and information needed for after-sales service. Stripe handles payment details on its payment pages. We do not receive or store your complete card number or security code.
  • Email and support information: recipient email, name, and action links needed for verification, password resets, and welcome messages, plus correspondence and order details you voluntarily send to support.
  • Website operation information: information normally present in network requests, such as IP address, path, time, and technical errors, used for delivery, security, and troubleshooting. Infrastructure providers may also process request information for these purposes.

The site currently does not enable advertising tracking, third-party visitor analytics, marketing newsletter subscriptions, or user file uploads. Avoid sending unnecessary personal information, passwords, or full payment details in support messages or attachments.

How we use information

We use information to provide accounts and purchases: verifying email, maintaining sign-in, resetting passwords, confirming orders, delivering source code, providing updates and support, processing refunds, and answering enquiries. We also use it to prevent fraud and abuse, secure the service, troubleshoot problems, and meet applicable accounting, tax, or other legal obligations.

Where applicable law requires a processing basis, relevant bases include performing a transaction or taking requested steps before it, complying with legal obligations, and legitimate interests in security and responding to enquiries. We rely on consent only where needed and validly obtained. You may withdraw that consent without affecting the lawfulness of earlier processing.

We do not sell personal information or use account or order details for unrelated advertising profiles. Verification, password-reset, and order-service emails are functional or transactional messages.

Sharing and third parties

We share necessary information with these providers to deliver the relevant service:

ProviderPurpose and information involved
CloudflareHosting, network delivery, security, databases, and related infrastructure; may process requests and the account, session, and order information stored by the site
StripeHosted payments, transaction confirmation, and refunds; processes checkout submissions and necessary email, order amounts, and transaction identifiers
ResendAccount verification, password-reset, and welcome email delivery; processes recipient addresses, message content, action links, and delivery-related information

Providers may also process information under their own service and legal obligations; their privacy information is linked above. Email providers process correspondence when you contact our support inbox.

We may disclose information where necessary to comply with law, protect legitimate rights of users or the service, or handle an organisational or asset transfer. Applicable notices and safeguards will be used where legally required. We do not arbitrarily provide account details to unrelated third parties.

Storage, international processing, and retention

Provider infrastructure may be outside your region, so information may be stored or processed in other countries or regions. We manage this processing through provider contracts and available data-protection arrangements, with additional safeguards where required by applicable law. Contact us for information about processing relevant to you.

Account information is normally retained while the account exists to provide ongoing service. Sessions, verification credentials, and security records are retained according to validity periods and security and troubleshooting needs. Expired records may await cleanup; expiry does not mean immediate deletion from every store. Support correspondence is retained as needed to resolve enquiries, provide follow-up service, and address disputes.

Order, refund, and related records are retained as needed for delivery, support, accounting/tax duties, and disputes. Deleting an account may not delete transaction records that must legally be retained; their use and access should be limited. Backups, copies, and provider records follow applicable cleanup cycles. We do not promise instantaneous erasure from all systems when an account is deleted. Contact us about a particular record's retention basis or a deletion request.

Cookies and browser storage

We use cookies and browser storage needed for sign-in, security, and preferences:

CategoryName or formPurpose and duration
Authentication and securityBetter Auth session cookies, such as better-auth.session_token, potentially prefixed with __Secure- on HTTPS; authentication may also use temporary cookiesValidate sessions and protect authentication flows; subject to session or cookie expiry. Sign-out or revocation invalidates the relevant session
LanguageNEXT_LOCALERemembers the language choice for one year when written by the language switcher; you can clear it in the browser
Appearance and layoutTHEME, DOCS_SIDEBAR, and related interface preference storageRemembers theme and documentation sidebar preferences until expiry, replacement, or browser-data removal

Advertising and analytics tracking cookies are not enabled. Third parties such as Stripe may use payment-security cookies on their own pages; see their policies. You can inspect, block, or clear storage in your browser, although blocking necessary cookies may break sign-in or preferences.

Your choices and rights

You can update your display name in your account, change your password or request deletion from the Security page, and revoke sessions from the Login Devices page. Email changes currently have no self-service interface. Contact support for an email correction so we can verify identity and assess the available handling.

Depending on applicable law, you may have rights to access, correct, delete, obtain copies or portable data, restrict or object to processing, and withdraw consent. You may also complain to a competent regulator. Send requests to the email below. We will reasonably verify identity and respond within the applicable legal deadline. Legal retention duties or other people's rights may limit some requests; we will explain the reason.

Security, children, and policy changes

We use password hashing, session validation, and access controls, but no network or storage system can guarantee absolute security. Protect your passwords, verification links, and API keys; do not send them through ordinary support email.

The site is intended for purchasers and developers with the necessary legal capacity, not children. Contact us if you believe a child has provided personal information without appropriate authorisation.

Updates and their effective date will appear here. Material changes to processing purposes or user rights will be notified through the site or registered email as appropriate, with consent obtained where legally required.

Contact

Operating name: Jerbix. The service is operated by an individual under the Jerbix name, so no registered entity name is listed here.

Privacy requests and support: service@jerbix.site.