LintKitLintKit

Privacy Policy

Last updated: February 27, 2026

This policy covers two separate products: the lintkit.com website and the LintKit Figma plugin. They collect different data and are described separately below.

Contact: support@lintkit.com

Part 1: LintKit Figma Plugin

We Do Not Collect Your Data

The LintKit plugin runs entirely within Figma's plugin sandbox on your device. We do not operate servers that receive, store, or process any data from the plugin. We have no database of users, no analytics in the plugin, and no telemetry.

What the Plugin Stores Locally

The plugin uses Figma's clientStorage API to save settings on your device. This includes your rule configuration, ignored findings, fix count, daily reset timestamp, and license key (Pro users). This data never leaves your device. Uninstalling the plugin or clearing its data removes it entirely.

What the Plugin Does NOT Do

  • Does not access, read, collect, or transmit your design file contents
  • Does not send any data to LintKit-operated servers (we have none)
  • Does not collect your Figma account information, name, or email
  • Does not track usage, run analytics, or send telemetry
  • Does not access data about your teammates or collaborators
  • Does not store your Personal Access Token or GitHub credentials on any remote server

Network Requests the Plugin Makes

The plugin makes network requests directly to third-party APIs — never through our servers:

Figma API (api.figma.com): If you provide a Personal Access Token for library discovery, the plugin sends requests directly to Figma's REST API. Your PAT is stored locally in the plugin sandbox and is never transmitted to us.

GitHub API (api.github.com): If you configure GitHub Token Sync (Pro feature), the plugin fetches token files directly from GitHub. Your GitHub token is stored locally in the plugin sandbox and is never transmitted to us.

Lemon Squeezy (api.lemonsqueezy.com): Pro license validation. The only data sent is your license key to verify its status. No design data, file contents, or personal information is included in these requests.

Summary for IT and Security Teams

| Question | Answer | |---|---| | Does the plugin send design data to external servers? | No | | Does the plugin have its own backend? | No | | Does the plugin collect personal information? | No | | Does the plugin run analytics or telemetry? | No | | Where is user data stored? | Locally on the device via Figma's clientStorage | | What network calls does the plugin make? | Direct to Figma API, GitHub API, or Lemon Squeezy — never to LintKit servers | | How do I delete all plugin data? | Uninstall the plugin or clear its data in Figma's plugin settings |

Part 2: lintkit.com Website

Analytics

We use Google Analytics on the lintkit.com website to collect anonymous usage data including pages visited, time on site, browser type, device type, and approximate geographic location. This data is aggregated and cannot identify you personally.

Cookies

We use only essential cookies required for the website to function. We do not use advertising, tracking, or third-party marketing cookies.

Hosting

The website is hosted on Vercel. Vercel may collect standard server logs (IP address, user agent, timestamps) as part of their hosting service. See Vercel's privacy policy: https://vercel.com/legal/privacy-policy

DNS and Email

Our domain is managed through Cloudflare. Email to support@lintkit.com is routed through Cloudflare Email Routing. See Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

Part 3: Pro Subscriptions

Payments are processed entirely by Lemon Squeezy. When you purchase a Pro subscription, Lemon Squeezy collects your name, email address, and payment information. We receive your email address and license status from Lemon Squeezy to deliver your license key and critical product updates. We do not have access to your full payment details.

We do not send marketing emails unless you explicitly opt in.

You can manage your subscription, update your payment information, or request deletion of your data through the Lemon Squeezy customer portal. Lemon Squeezy's privacy policy: https://www.lemonsqueezy.com/privacy

Your Rights

  • Plugin data: Stored locally on your device. Uninstall or clear plugin data to remove it.
  • Subscription data: Managed by Lemon Squeezy. Use their customer portal to access, modify, or delete your information.
  • Website analytics: Opt out of Google Analytics by using a browser ad-blocker or disabling JavaScript.
  • EU/EEA residents: You have additional rights under GDPR including the right to access, rectify, port, and delete your data. Contact support@lintkit.com to exercise these rights regarding any data we can access on your behalf.

Children's Privacy

LintKit is not directed at children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. For significant changes, we will notify Pro subscribers by email.

Questions?

Email us at support@lintkit.com.