Privacy Policy

1. Who we are

ShotMark is operated by Mindantic LLC ("Mindantic", "ShotMark", "we", "us", or "our"), a limited liability company based in Missouri, United States. Mindantic is the data controller responsible for the personal information described in this policy.

We're a small team building agent-ready bug-capture tooling, and the product is currently pre-launch. This policy explains what we collect when you visit shotmark.dev, join the waitlist, subscribe to our newsletter, contact us, or use our free tools, and what we do with it.

2. Information we collect

We try to collect only what we actually need:

• Waitlist & newsletter, the email address you submit, and the page it was submitted from.
• Contact form, your name, email address, chosen subject, and message.
• Usage analytics, standard data such as pages viewed, referrer, approximate location derived from your IP, browser, and device type, collected through PostHog.
• Free tools, anything you paste into tools like the JSON formatter, HAR viewer, or JWT decoder is processed in your browser and is not sent to or stored on our servers.

3. How we use your information

• To send the newsletter or waitlist updates you asked for.
• To respond to your messages and requests.
• To understand how the site is used and improve our content and tools.
• To keep the site secure and prevent abuse, including spam protection on our contact form.

4. Legal bases (EEA & UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases: your consent (for marketing emails, which you can withdraw at any time), our legitimate interests (to operate, secure, and improve the site), and compliance with legal obligations where they apply.

5. Cookies & analytics

We use PostHog for privacy-conscious product analytics, which may set cookies or use similar technologies to recognise returning visitors and measure usage. We do not use advertising or cross-site tracking cookies.

You can block cookies in your browser settings and opt out of analytics; the core site will still work.

6. How we share your information

We do not sell your personal information. We share it only with the service providers that help us run ShotMark, and only as needed to provide the service:

• Supabase, stores waitlist and newsletter emails (PostgreSQL, hosted in the US).
• PostHog, product analytics.
• Emailit, delivers transactional and contact-form emails.
• Vercel, hosts and serves the website.

These providers process data on our behalf under their own terms and security commitments. We may also disclose information where the law requires it, or to protect ShotMark, our users, or the public.

7. Data retention

We keep newsletter and waitlist emails until you unsubscribe or ask us to delete them. Contact-form messages are kept as long as needed to handle your request and for our records. Analytics data is retained in aggregate according to PostHog's retention settings.

8. International transfers

Our providers are based in the United States, so your information may be processed there. Where required, such transfers rely on appropriate safeguards, such as Standard Contractual Clauses.

9. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate.
• Delete your data (the "right to be forgotten").
• Receive a copy of your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent for marketing at any time, every email includes an unsubscribe link.

California residents have similar rights under the CCPA, including the right to know and delete, and the right not to be discriminated against for exercising them. We do not sell personal information. To exercise any right, email hello@shotmark.dev and we'll respond within the timeframe the law requires.

10. Security

We use reputable infrastructure providers and reasonable technical and organisational measures to protect your data. That said, no method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

11. Children's privacy

ShotMark is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us their information, contact us and we'll delete it.

12. Changes to this policy

We may update this policy as ShotMark evolves. We will revise the "last updated" date above, and we may announce significant changes through the site or by email.

13. Contact

Questions about this policy, or a request about your data? Email hello@shotmark.dev or use our contact form. You can also reach us by post: