Privacy Policy
Last updated: May 2026
What We Collect
We collect only what you provide and what the service generates as you use it:
- Account info (you provide): email address, display name, ship name, timezone, delivery preference
- Card completion data (you provide): observations, structured inputs, and notes entered when completing task cards
- Quiz results: answers and scores from deliverability quizzes
- Progress data (generated): rank, points, streaks, and card completion status
- Event log (generated): card completions, logins, and other activity timestamps
How We Use It
We use your data to:
- Provide the Shipshape service and track your progress
- Send magic link emails so you can sign in
- Deliver card digests and notifications based on your delivery preference
- Improve the service based on aggregate usage patterns
Data Storage
Your data is stored in a SQLite database on a Hetzner server located in Falkenstein, Germany (EU). Data at rest is stored on encrypted volumes. We do not transfer your data outside the European Union.
We send transactional emails (magic links and card digests) through Brevo, an EU-based email service provider. All emails are sent from noreply@shipshape.email. We do not send marketing emails or share your email address with advertisers.
Analytics
We plan to use Plausible for website analytics. Plausible is privacy-friendly: it does not use cookies, does not collect personal data, and is compliant with GDPR, CCPA, and PECR. No analytics are active until Plausible is installed.
Data Sharing
We do not sell your data. We do not share your personal information with third parties except:
- Brevo: receives your email address to deliver magic links and card digests
- Plausible (planned): receives anonymous, aggregated page view data with no personal identifiers
Your Rights
Our server is in the EU, so GDPR applies. You have the right to:
- Access: export all your data as JSON from your account settings
- Deletion: delete your account and all associated data from your settings page
- Portability: your exported data is in standard JSON format, ready to take wherever you need
- Rectification: update your profile information at any time in your settings
To exercise any rights not covered by the self-service options above, email us at hello@pleasedtomailyou.com.
Data Retention
Your account data (profile, card completions, quiz results, progress) is kept for as long as your account exists. When you delete your account, all your data is permanently removed. Event logs (activity timestamps) are retained for up to 1 year, then automatically purged.
Children
Shipshape is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
Changes
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. We encourage you to check this page periodically for any changes.
Contact
If you have questions about this Privacy Policy or how we handle your data, email us at hello@pleasedtomailyou.com.