Privacy

This notice is short because launchpad collects very little. Every statement below describes code you can read.

No account needed

You do not create one, and there is nothing to log into. The dashboard runs on your own machine and binds to loopback.

Our license server logs a one-way code made from your key with each check and download, and writes that code into the files it sends you, so a leaked copy can be traced to its key. To limit abuse, it keeps a salted one-way code of your IP address for up to a day. It never keeps your key or your IP address in its logs.

What launchpad sends

Three things leave it for us or our payment provider, and each one follows something you did or said yes to:

• An update check: this happens at most once a day, and whenever you ask. It sends nothing about you. It reads one public file on our site, the list of releases, the same way a browser does. It reports the available version and never installs anything. You update when you choose to.
• A license check: this happens when you activate your key, about once a day while you use launchpad, and when Claude opens one of its instructions. It sends your key to our license server, which passes it to the payment provider to confirm it, or to the payment provider directly when our server can't be reached. It also sends this computer's name and a short one-way code made from its id the same way when you activate, so you and support can tell which computers use the key. It sends your key, this computer's activation, a one-way code made from this computer's id and the version to our license server. Our license server sends launchpad, and each instruction Claude opens, only to the computer your key is on. It never sends your code or your files. A key that has been checked once keeps working offline for up to 30 days at a time. After that, launchpad needs to reach our license server once to keep going. This check sends no information about your projects.
• launchpad's own usage analytics: this happens only if you said yes, at the end of setting up a project. It sends anonymous usage analytics about launchpad to our license server. They list the stacks launchpad found and the checklist items that worked. They never contain your code, names or paths. Mission Control asks you once, after you answer the questions for your first app. If you say not now, it asks once more a week later, and never again. launchpad sends its usage analytics only after you say yes. If you do not answer, they stay off. After you say yes, at the end of setup and apply only, it sends one small anonymous list to our license server. The list has these 9 fields: v (the version of this list), launchpad (the launchpad version you run), os (your operating system: macOS, Windows or Linux), stacks (the frameworks it found, by our own names for them (for example Next.js, Flutter or Rails)), hosts (the hosting and database services it found, by our own names (for example Vercel or Supabase)), archetypes (the kinds of app it found: web app, site, iOS, Android or Mac), outcome (how setup ended, as one word from a fixed list), items (the state of each checklist step: done, to do, by hand or not applicable), apply (whether launchpad wrote its setup files and, if it could not, one of three fixed reasons). Stacks, hosts and checklist items are named only by launchpad's own registry names, never by anything read from your project. It never carries your code, file or folder names, paths, project, app or company names, keys, tokens or other secrets, email addresses, your license key, anything that tells one machine or person from another; it has no install id and no time finer than the day, and it is never linked to your license key. The server checks it against those exact fields and refuses anything else, adds it to one count per day, and keeps no request, address or header. To limit abuse it keeps a one-way, salted hash of the sending address for up to a day, then deletes it. The daily counts are deleted after 13 months. Ask Claude to run launchpad telemetry show to print the list for a project without sending it. Ask it to run launchpad telemetry off, or set DO_NOT_TRACK=1, LAUNCHPAD_NO_REPORTS=1 or CI=true, to turn the usage analytics off. They are never sent from the dashboard or CI.

Beyond those, launchpad talks only to your own accounts, when you ask it to act — GitHub (through your own gh, to set a repository's secrets), Cloudflare and Vercel when you wire a domain, and — only if you turn live signals on — reading your own analytics, build and crash numbers from those services.

Claude Code, which launchpad runs inside, reads your code under Anthropic's terms, as it does for anything else you ask it.

No repository contents, no file names and no paths are transmitted. Unless you said yes to launchpad's own usage analytics, no scorecard results and no usage data are either. The product has no other analytics of ours, and no crash reporting of ours.

Where your keys are stored

Your credentials live in your operating system's keychain — Keychain on macOS, or Secret Service on Linux when secret-tool is installed. Anywhere else, they live in an encrypted file in your home folder (~/.launchpad/vault.json), locked with a passphrase you set. From there they go into your own repository's secrets. They are never written to a dotfile in your repo or to a log, and they never reach us. We could not read them if we wanted to.

What Lemon Squeezy stores

Lemon Squeezy sells launchpad as the merchant of record. It holds what it needs for a sale, such as your email address, your billing country and your payment details, under its own privacy policy. When you activate a key, it also keeps the name of that computer beside the key. We see your order and your email address, and we never see your full payment details.

This website

This website is static files, one form handler for the checklist email, and one handler that receives orders from Lemon Squeezy. It loads no advertising script. It sets no cookies, except Trybe's cookie for some visitors who arrive from a creator's or an ad's link, as "Creator and ad links" below says. It serves its own fonts and uses no font service.

Your browser keeps a few display choices for this website and nothing else: light or dark mode (the one you picked, or the one the page first showed you), whether you paused the motion, and whether you closed the buy bar or already saw the corner card, so neither comes back. If Trybe runs (see "Creator and ad links"), your browser also keeps its cookie and its note of your visit.

Vercel hosts this website and keeps standard request logs, such as your IP address and browser, for a short time under its own privacy policy. Our license server runs on Cloudflare, which handles its requests under its own privacy policy.

When you open the checkout from this website, the link tells the checkout which button you pressed. If a link in ChatGPT, Claude, Perplexity, Gemini or Copilot brought you here, it also says which one, and if you followed one of our own tagged links (a post or a newsletter, for example), it says that link's tag instead. If an ad brought you here, the link also passes on the ad's tag. The checkout keeps these with your order.

Analytics on this website

This website uses PostHog, an analytics service, to see how visitors use it. PostHog runs here without cookies and keeps no ID in your browser, so it can't recognize you on another day or follow you to other websites.

It records the pages you open, the parts of the home page you scroll to and how long you stay on each, the buttons and links you tap or click, the link that brought you here (with an ad's tag if an ad sent you), and your device and browser type. It never records the words you type into a form, and it makes no recordings of your screen.

To count visitors, PostHog turns your IP address and browser into a code that changes every day and can't be turned back. It doesn't keep your IP address. PostHog processes this data for us under its own privacy policy, in the United States.

When you buy, the checkout keeps that tag with your order, and we send PostHog the order's total and the tag, without your name or email address.

Creator and ad links

We pay some creators for videos about launchpad, partly by the sales their videos bring. Trybe, a creator marketing service, tells us which video led to a sale.

Trybe's script runs only when you arrive from a link with a creator's or an ad's tag, and only if you're outside the European Union, the European Economic Area, the United Kingdom and Switzerland. Otherwise it doesn't load and sets no cookie. To decide, this website checks which country your IP address is in, and it keeps nothing from that check.

When it runs, Trybe sets a cookie on this website with a random ID that lasts one year, and keeps a note of your visit in your browser until you close the tab. It records the pages you open here, the link and tag that brought you, the page that sent you, your browser type and your screen size.

When you buy, the checkout keeps that random ID with your order, and we send Trybe the order number, its total and the ID, without your name or email address. Trybe processes this data for us under its own privacy policy.

You can delete the cookie in your browser's settings at any time.

The launch checklist by email

If you ask for the launch checklist by email, the form sends your address to this website, which passes it to Resend, the service that sends our email. Resend emails you the checklist, and we add your address to our list.

We keep your email address and, if you ticked the box, that you want an email when one of the checklist’s rules changes. We keep no name, and our emails do not track opens or clicks.

Every email has an unsubscribe link. Unsubscribing deletes your address from our list at Resend, and you can also ask support@shiplaunchpad.com to delete it. Resend keeps a log of the emails it sends under its own privacy policy.

If you email yourself the link from the home page on your phone, the same form handler asks Resend to send you that email, and we keep your address on a separate list so we can follow up about launchpad. The same unsubscribe link stops those emails, and you can ask support@shiplaunchpad.com to delete your address.

To stop abuse, the form counts the recent requests from each IP address in memory for 10 minutes, and that count is never written down.

The emails after you buy

When you buy launchpad, Lemon Squeezy tells this website about the order. We keep your email address and your first name from the order as a contact at Resend, the service that sends our email, in our list of launchpad buyers.

We use them to send you three short emails, 1, 3 and 7 days after you buy, to help you get launchpad running. Resend stores the contact and sends the emails for us, as our processor, under its own privacy policy. When you reply, your reply goes to support@shiplaunchpad.com.

Every email has an unsubscribe link, and unsubscribing stops these emails. You can also ask support@shiplaunchpad.com to delete your contact.

Instagram messages

If you comment on our posts or message us on Instagram, ManyChat, the service that sends our automatic replies, and Meta process your username and your messages so we can reply. We keep them until you ask us to delete them.

Who processes your data

• Lemon Squeezy sells launchpad as the merchant of record, under its own privacy policy.
• Vercel hosts this website.
• Cloudflare runs our license server and forwards email sent to support.
• Google holds the support mailbox, in Gmail.
• Resend stores our email lists and sends our email.
• PostHog runs this website's analytics.
• Trybe tells us which creator's video led to a sale.
• ManyChat and Meta handle our Instagram messages.

These providers are based in the United States, so your data may be processed there, under each provider's own data processing terms.

How long we keep it

We keep the email address from your order, your emails to support and your Instagram messages until you ask us to delete them. Our email lists keep your address until you ask us to delete it, and unsubscribing from the checklist email deletes it too. The usage counts and the abuse codes are deleted on the schedules above. Lemon Squeezy and the other providers keep their own records under their own policies.

Who is responsible for your data

Siddharth Karia makes launchpad and decides how the personal data on this page is used, which makes Siddharth Karia its controller under data protection law such as the GDPR. You can reach us at support@shiplaunchpad.com.

Why we use it

• Your order, your key and the computer names it activates on: we need them to sell you launchpad and keep your key working, which is our contract with you.
• The emails after you buy: they help you get launchpad running, which is part of our contract with you and our legitimate interest.
• launchpad's own usage analytics and the checklist email: each one starts only after you say yes, which is your consent. You can take it back at any time.
• This website's analytics: they show us which parts of the page work and which ads bring buyers, without cookies or anything that identifies you, which is our legitimate interest.
• Trybe, on creator and ad links: it tells us which creator's video led to a sale so we can pay them, which is our legitimate interest. It doesn't load in the EU, the EEA, the UK or Switzerland.
• The request logs and the form's abuse count: they keep this website running and safe, which is our legitimate interest.
• Your emails to support: we use them to answer you, which is our legitimate interest.

Your rights

You can ask us for a copy of the personal data we hold about you, and ask us to correct it, delete it or stop using it. Where we rely on your consent, you can take it back at any time. Write to support@shiplaunchpad.com, and we answer within one month. You can also complain to the data protection authority where you live.

Do Not Track

This website doesn't change what it does when your browser sends a Do Not Track signal. Its analytics don't follow you to other websites, and Trybe's cookie, when it runs, is set on this website only.

Children

launchpad and this website are not meant for children under 16, and we don't knowingly collect their personal data.

Contact

Send questions about any of this to support@shiplaunchpad.com.

Last built 2026-11-15.

← Back to the front page