Privacy
Last updated 26 October 2026. Plain-language summary written for Mint; not reviewed by a lawyer.
What Mint stores
- Account: your name, email, a salted PBKDF2 hash of your password and a SHA-256 hash of your recovery code. Mint never sees or stores the password or code itself.
- Marketplace data: drafts, listings (including your payment link), orders, reviews, reports, affiliate links and click counts.
- Payout details you choose to enter, shown only to sellers who owe you an affiliate commission.
- Automatic payments (sellers who turn them on): your Midtrans, Xendit or Stripe secret key, encrypted (AES-GCM) and used only to create checkouts and read their payment status. Disconnecting deletes it.
- Notifications: the push address your browser gives Mint when you switch notifications on, and your email preference. Emails (when enabled) are sent through Resend.
- Sign-in sessions: a random token kept in your browser’s local storage; the server keeps only its hash.
- Abuse protection: your network address is used briefly for rate limits (sign-up, login, clicks) and is not stored with your account.
Who sees what
- When you order a paid template, the seller sees your name, email and order reference so they can match your payment.
- Your public name appears on listings you sell and reviews you write.
- Payments happen on the seller’s own checkout (for example Lynk.id, Saweria, PayPal). Mint never receives card or bank data; that checkout’s own privacy policy applies.
- Mint AI prompts are sent to Cloudflare Workers AI to generate a template and are not used to identify you.
Where it lives
The website is hosted on GitHub Pages; the Mint API and database run on Cloudflare Workers / Durable Objects. No ads, no analytics trackers, no selling of data.
Your choices
- Edit your name and payout details in Account.
- Delete your account in Account → Delete account. This removes your login, drafts, affiliate links, payout details and sessions and takes your listings off the market. Order records stay so buyers and sellers keep their purchase history, shown as “Deleted user”.
- Offline mode keeps data only in your browser; clear it in Account.
Questions or requests: contact the maker through juw12.github.io/portfolio.