Legal

Privacy Policy

Last updated: April 15, 2025

Overview

ReferentialSheet(“we”, “us”, or “our”) is a personal developer tool for organizing command-line snippets and cheatsheets. This policy explains what data we collect when you use the service, why we collect it, and how it is stored.

By creating an account or using the service, you agree to the practices described here. If you do not agree, please do not use ReferentialSheet.

Information We Collect

Account data

When you register, we store your email address and a bcrypt-hashed password. We never store your password in plain text. You may optionally set a display name.

Content you create

Categories, snippets, and commands you create in your workspace are stored in our database and are private to your account by default.

Usage data

We use Vercel Analytics — a privacy-focused, cookieless analytics tool — to understand aggregate page traffic. No personal identifiers are attached to these events.

Session data

Authenticated sessions are managed via NextAuth.js using a secure, HTTP-only cookie. Sessions expire after 30 days of inactivity.

How We Use Your Data

  • To authenticate you and serve your private workspace.
  • To store and retrieve the snippets you create.
  • To understand aggregate usage patterns and improve the service.

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

Data Storage & Security

Your data is stored on servers hosted by Vercel and Neon (PostgreSQL). Data in transit is encrypted with TLS. Passwords are hashed with bcrypt before storage.

See our Security page for a detailed breakdown of the technical safeguards in place.

Data Retention

Your account data is retained for as long as your account is active. You may request deletion of your account and all associated data by contacting us at the address below. We will process the request within 30 days.

Third-Party Services

We use the following third-party services:

  • Vercel — hosting and edge network
  • Neon — PostgreSQL database
  • Vercel Analytics — cookieless page analytics

Each provider has its own privacy policy. We encourage you to review them if you have concerns about how they handle data.

Cookies

We use a single session cookie set by NextAuth.js to keep you logged in. We do not use tracking or advertising cookies. Vercel Analytics does not set cookies.

Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and data.
  • Object to processing of your data.

To exercise any of these rights, contact us at privacy@referential-sheet.com.

Children

ReferentialSheet is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top. Continued use of the service after a change constitutes acceptance of the revised policy.

Contact

Questions about this policy? Email us at privacy@referential-sheet.com.