Privacy Policy
What we collect, why we collect it, and how you can control or delete it.
Last updated: November 1, 2026
1. Who we are
This policy explains how Jolocky (jolocky.com) handles personal data. For any privacy question or request, email support@jolocky.com.
2. Data we collect
- Account data: your email address, and your name and profile picture when you provide them or sign in with Google or GitHub. Profile pictures you upload are stored in Cloudflare R2.
- Purchase data: payments are processed by Dodo Payments. We store the subscription and payment IDs, amount, currency, status and invoice link. We never receive your full card details.
- License and usage data: your license key, and when you install items through the CLI registry, the item name, time, user agent and a hashed (not raw) IP address. We may use this to check refund requests and to detect shared license keys.
- Template subscriptions and websites: when you buy a template subscription, such as Jlaude Schedule, Dodo Payments sends us your name, email address, the subscription and payment IDs and the subscription key. When a WordPress website that uses a Jolocky template or add-on checks its licence or looks for updates, it sends us the website's address, the product and version it runs, and its WordPress and PHP versions. We record the website the key activates, the result of the website's last check and which releases were downloaded.
- Template downloads: downloading a template or its add-on from Jolocky needs an account. We record which product your account downloaded, the last version, how many times, and when you first and last downloaded it.
- Security data: your IP address or license key, used briefly to apply rate limits and prevent abuse.
- Email preferences: whether you receive product update emails.
3. Cookies and local storage
jolocky_session: keeps you signed in (signed, HttpOnly, 30 days).oauth_state_googleandoauth_state_github: protect Google and GitHub sign-in (10 minutes).oauth_next: the Jolocky page to return to after Google or GitHub sign-in (10 minutes).jolocky_signed_out: remembers that this browser is signed out, so pages don't check for an account on every visit (no personal data, 30 days, removed when you sign in).- Your browser's local storage keeps your bookmarks, your Pro license key for quick access, a sign-in sync flag, your theme and layout preferences, and high scores in some interactive demos.
We do not use advertising or cross-site tracking cookies.
4. How we use data
- to provide your account, Pro access and license keys;
- to activate and check template subscription keys, deliver signed template updates and detect keys used on more websites than their licence allows;
- to process purchases, renewals, cancellations and refunds;
- to send transactional emails such as sign-in links, license keys and renewal receipts;
- to send occasional product update emails, including news, fixes and offers for templates you downloaded. Account holders receive them by default and can unsubscribe at any time from the link in each email or from the dashboard; and
- to prevent abuse and keep the service secure.
5. Service providers
We share data only with providers that run Jolocky for us:
- Supabase (database)
- Cloudflare (file storage and DNS)
- Resend (email delivery)
- Dodo Payments (payments, as Merchant of Record)
- Netlify (website hosting)
- Upstash (rate limiting)
- Google and GitHub (only if you sign in with them)
These providers may process data outside the country where you live.
6. Retention and deletion
We keep your data while your account exists. Deleting your account from the dashboard (Account tab) removes your profile, Pro licenses, order history, CLI logs, template download records and uploaded profile picture from our systems, and cancels your template subscriptions. Copies in backups may remain for a limited time. Dodo Payments keeps its own transaction records as required by law.
Records of a template subscription (the key, your name and email, the Dodo IDs and the website it activated) are kept while the subscription runs and for 2 years after it ends, for refunds and disputes, then deleted. The last check of each website is kept while the website uses the product.
7. Your rights
You can access, correct or delete your data, and unsubscribe from product emails, from your dashboard or by emailing support@jolocky.com.
8. Children
Jolocky is not intended for children under 13.
9. Changes to this policy
We will update the “Last updated” date when this policy changes, and notify account holders of material changes by email.