Privacy

Last updated 6 October 2026

Liro is one developer selling components. The honest summary is that we hold as little about you as the thing can be built with, because storing more would be work with no upside.

What is stored

• Your email address – it is how you sign in and where receipts go.
• A display name, if you set one. Optional, and only used to address you.
• Subscription and purchase records status, dates and the Lemon Squeezy identifiers needed to match a payment to your account.
• Download history – which component, when, and whether it came from the site or the CLI. It is shown back to you on your account page; that is what it is for.
• A CLI token, so the shadcn CLI can prove it is you without a browser session.
• Which free components you have taken, and when, while the free plan limits how many can be taken a day. For a signed-in account this is kept against the account. For everyone else it is kept against a scrambled, one-way code made from the network address, which cannot be turned back into the address. The address itself is not stored.

What is never stored

• Card details. Lemon Squeezy takes the payment; they never reach us.
• Passwords. There are none, sign-in is a link to your email.
• Anything about the projects you build, or the code you write with the components.

Who else sees it

Three companies, each doing one job: Supabase stores the database and sends sign-in emails, Lemon Squeezy processes payments and is the merchant of record, and Vercel hosts the site. Nobody buys, sells or receives your data for advertising, and there is no tracking product on this site. Page views are counted with Vercel Web Analytics, which sets no cookies and does not follow you across other sites.

Cookies

One holds your sign-in session. A second may be set when you copy a free component: it remembers which free components you have taken, so the free plan’s daily limit, when there is one, can be counted. There are no advertising or analytics cookies, which is why there is no consent banner to dismiss, there is nothing to consent to.

Your theme choice and a few small settings, like dismissing a popup, are saved in your browser only and are never sent to us.

How long

Account and purchase records are kept while your account exists, and payment records for as long as tax rules require after that. Ask us to delete your account and we will, except for the records we are legally obliged to keep.

Your rights

Ask for a copy of what we hold, ask for it corrected, or ask for it deleted. Write to layropro26@gmail.com and it gets done, there is no process to navigate, because there is no department to navigate it.