Privacy Policy

Last updated: July 31, 2026 · Covers the Basalt extension and related websites (marketplace, submit, dashboard).

This policy explains what we collect, why, and your choices. Basalt is built for developers; we try to collect only what we need to run the product.

1. Who we are

Basalt (“we”) operates the Basalt VS Code / Cursor extension and associated web apps. Contact: basalt.support@gmail.com.

2. What we collect

• Account data — email, name (if provided), auth provider IDs when you sign in with email, Google, or Apple.
• Marketplace data — listings you submit, purchases, payout requests, sync keys tied to your user id.
• Usage analytics — product events (e.g. page views, install clicks, purchases) via PostHog. We avoid putting emails or source-code contents in event properties.
• Technical logs — extension diagnostics may include error messages needed to fix preview failures (not your full project unless you paste it to us).
• Payment data — when real checkout is enabled, card details are handled by our payment processor (e.g. Stripe), not stored on our servers as full card numbers.

The editor runs on your machine. We do not intentionally upload your entire codebase to Basalt servers for editing.

3. How we use data

• Provide and improve Basalt, Marketplace, Submit, and Dashboard
• Authenticate you and sync Marketplace purchases into the extension
• Process artist payouts and prevent fraud / abuse
• Understand product usage (PostHog) and fix bugs
• Comply with law and enforce our Terms

4. Analytics (PostHog)

We use PostHog (US-hosted) for product analytics and feature flags on the website and, where enabled, the extension. PostHog may set cookies or local storage identifiers. You can block trackers in your browser; core editor features that do not depend on analytics still work.

5. Sign-in providers

If you use Google or Apple Sign In, those companies process your login according to their policies. We receive a verified identity token / profile fields needed to create your Basalt session.

6. Sharing

We share data with processors who help us run the service, including:

• Supabase (auth, database, file storage)
• PostHog (analytics)
• Payment processors when paid checkout is enabled
• Hosting / CDN providers for the website

We do not sell your personal information. We may disclose data if required by law or to protect rights and safety.

7. Retention

We keep account and marketplace records while your account is active and as needed for sales history, abuse prevention, and legal obligations. You can ask us to delete your account data; some records (e.g. completed purchases) may be retained in anonymized or limited form.

8. Security

We use industry-standard providers and access controls. No method of transmission or storage is 100% secure.

9. Children

Basalt is not directed at children under 16. Do not use the service if you are under the age required in your country.

10. Your choices

• Update profile info in the Dashboard settings where available
• Sign out / stop using the product anytime
• Email us to request access, correction, or deletion of personal data we hold
• Use browser controls to limit analytics cookies

Depending on where you live (e.g. EEA/UK/California), you may have additional rights. Contact us to exercise them.

11. International transfers

We and our processors may process data in the United States and other countries. By using Basalt you understand that your data may be transferred to those locations.

12. Changes

We may update this policy. The “Last updated” date will change when we do. Continued use means you accept the updated policy.

13. Contact

basalt.support@gmail.com