Privacy Policy.
What tode keeps and for how long, the two providers it relies on, the cookies the dashboard sets, and how to export or delete your data.
Last updated October 2026
1. Introduction
Tode ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we use and safeguard your information when you use our analytics service for Figma plugins and widgets.
2. How We Use Your Information
We use the information we hold to:
- Provide and maintain the Service
- Generate analytics reports for your plugins
- Improve and optimize the Service
- Communicate with you about your account, your plan and your usage
- Ensure security and prevent fraud
We send transactional email only: email verification, password reset and change notices, plan changes and event quota warnings. We do not send marketing email.
3. Data Storage and Security
- All data is stored securely using industry-standard encryption
- We use secure HTTPS connections for all data transfers
- Access to data is restricted to authorized personnel only
4. Data Sharing
We do not sell your personal information. We work with two service providers:
- Hetzner Online GmbH (Germany) hosts our servers and database.
- Lemon Squeezy processes payments as the merchant of record. When you subscribe, Lemon Squeezy collects your billing details directly; we receive your subscription status, customer id and the brand and last four digits of your card.
We may also disclose data to law enforcement when required by law.
5. Data Retention
Analytics events sent by your plugin are kept for the retention window of your plan and then deleted by a nightly job:
- Free: 7 days
- Starter: 90 days
- Pro: 365 days
- Business: 730 days
If you move to a plan with a shorter window, events older than the new window are deleted on the night after the change takes effect. Archiving a plugin revokes its API keys; its events stay until the retention window passes.
The IP address of a request to our ingest endpoint is used to derive a country code and to apply rate limits. It is not stored with the event.
Account data is kept while your account exists. Sign-in sessions expire after 90 days; sign-in attempts are kept for one day; email verification and password reset links are deleted when they expire.
Backups of the database are taken nightly and kept for up to five weeks. Data you delete can remain in those backups until they rotate out.
6. Your Rights
You can ask us to access, correct, export or delete your account and the data associated with it by emailing hello@usetode.dev. We respond within 30 days. Deleting your account removes your account, your plugins, their API keys and all analytics events we hold for them.
7. Cookies
The dashboard at app.usetode.dev sets one essential cookie, tode_session, which keeps you signed in for up to 90 days. During sign-in with GitHub or Google a second short-lived cookie protects the sign-in flow and expires after ten minutes. Your light or dark theme preference is stored in your browser's local storage and is never sent to us.
The public website usetode.dev and the documentation at docs.usetode.dev use Google Analytics to count visits; it sets its _ga cookies in your browser. The dashboard itself loads no analytics, advertising or third-party scripts.
8. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect data from children.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place.
10. Changes to This Policy
We may update this Privacy Policy from time to time without notification.
Contact
Questions about this policy: hello@usetode.dev.