Legal
Privacy Policy
Last updated 22 October 2026
JINA is built to collect as little as possible. This policy explains what is processed when you use the site. JINA is an independent studio based in Diani, Kwale County, Kenya, and is the data controller for the small amount of data described here. We aim to follow Kenya's Data Protection Act, 2019 and, where it applies to you, the EU/UK GDPR.
What we don't do
- No analytics, no advertising, no tracking pixels, no cookies.
- No third-party scripts or fonts loaded from other domains.
- Share previews of a design are generated on our server from the design settings in the link; nothing else is sent.
- We do not store your name, email address, or payment details.
On your device
Your designs are generated in your browser. Your last design and, if you enter one, your licence key are saved in your browser's local storage so you can come back to them. If you arrive through a tagged link (for example from a partner or a social post), its campaign tags (utm_source, utm_medium, utm_campaign) are kept in session storage for that visit and passed to checkout, so we can see which channels work. Nothing identifies you personally. Clear storage any time in your browser settings.
On our server
We store only what is needed to make licences work:
- Key-to-design binding: a one-way hash of your licence key (not the key itself), the pack tier, the order number, and the design settings (your message text, style and colours) the key unlocks.
- Order records from Lemon Squeezy: order number, tier, design settings, order status, and hashes of the order's licence keys. No name or email.
- Refund/disable flags for licences that have ended.
- Rate-limit counters: a hash of your IP address and the current 10-minute window, used to limit key attempts. These are deleted after they expire.
This data is held in Cloudflare's database service. When you verify a key, it is also sent to Lemon Squeezy's licence API to check it.
Hosting
The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes standard request data (such as IP address and browser type) to deliver and protect the site, under its own privacy policy.
Payments
Lemon Squeezy is the merchant of record. It collects and processes your name, email, billing and payment details under the Lemon Squeezy privacy policy. We can see your order in the Lemon Squeezy dashboard to support you, but we don't copy your personal details into JINA's systems.
How long
Key bindings and order records are kept while your licence exists so you can re-download. Rate-limit counters expire after about 10 minutes.
Your rights
You can ask to access or delete the design binding linked to your key (deleting it means the key can be re-bound or may stop restoring your design) and you may complain to Kenya's Office of the Data Protection Commissioner or your local regulator. To make a request, email [email protected] (or reply to your Lemon Squeezy receipt email; your orders and keys are always at app.lemonsqueezy.com/my-orders).
Changes
If we change what we collect, we'll update this page and the date below.
Also see: Terms · Privacy · Refunds · Licence. Last updated 22 October 2026.