Privacy Policy

What defthat does

defthat is a tool that generates a tailored CLAUDE.md file for your project. You answer a few questions about your tech stack, pay a one-time $9 fee through Stripe, and receive your generated file. That is the entire product. There are no user accounts, no logins, and no passwords.

What we collect

We collect only what is needed to deliver your purchase:

• Project details and wizard answers. Your project name, a short description, and the choices you make about your stack (framework, database, auth method, etc.). These are used to generate your personalized CLAUDE.md file.
• Stripe session ID. A reference ID from Stripe that links your payment to your generated file. We store this alongside your wizard answers so we can verify your purchase and deliver the result.
• Purchase timestamp. When the transaction occurred.

What we do not collect

• No email addresses, names, or personal profiles.
• No credit card numbers or payment details. Stripe handles all payment processing, and card information never touches our servers.
• No analytics or tracking scripts. We do not use Google Analytics, Facebook Pixel, or similar tools.
• No account credentials. There is no login system on defthat.

How your data is stored

Your wizard answers and Stripe session ID are stored in a PostgreSQL database hosted on Supabase. The database uses row-level security, and records are only written by our server during the Stripe webhook confirmation flow.

Payment processing is handled entirely by Stripe. Stripe may store your email, payment method, and billing address according to their own privacy policy. We encourage you to review Stripe's privacy policy for details.

localStorage usage

While you work through the wizard, your answers are saved in your browser's localStorage. This keeps your progress if you navigate away and come back. After a successful purchase, your localStorage answers are cleared automatically. This data never leaves your browser until you complete the checkout.

Cookies

defthat does not set any first-party tracking cookies. Standard operational cookies may be set by Next.js (our framework) or Stripe (during checkout) as part of normal functionality. These are not used for advertising or cross-site tracking.

Third-party services

• Stripe processes payments. They receive your payment information and the wizard answers attached as session metadata.
• Supabase hosts our database. Purchase records (wizard answers, Stripe session ID, timestamp) are stored there.
• Vercel hosts the application. Standard server logs (IP addresses, request timestamps) may be retained by Vercel according to their own policies.

Data retention

Purchase records are retained indefinitely so we can verify past transactions and provide support. If you would like your data deleted, contact us and we will remove your record from our database.

Your rights

You can request a copy of any data we hold about you, or ask us to delete it. Since we do not collect email addresses or account information, you will need to provide your Stripe session ID (included in your result page URL) so we can locate your record. Send requests to defthatapp@gmail.com.

Children

defthat is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has made a purchase through our site, contact us and we will delete the associated record.

Changes to this policy

If we make meaningful changes to this policy, we will update the "Last updated" date at the top of this page. Since we do not collect email addresses, we cannot notify you directly. We recommend checking this page if you have questions about how your data is handled.

Contact

For privacy-related questions or data requests, email defthatapp@gmail.com.

Def That App
defthat.app