PRIVACY POLICY
Last updated: February 23, 2026
RegexVault ("we", "us", or "our") operates the website at regexvault.io. This Privacy Policy explains what information we collect when you use RegexVault, how we use it, and what choices you have.
RegexVault is a curated library of production-tested regular expression patterns. Our core service — browsing and copying patterns as JavaScript — requires no account and collects no personal information. Additional features (bookmarks, priority submission review, and Pro subscriptions) require an account and involve payment processing.
We collect only what we need to run the service. We do not sell your data. We do not build advertising profiles. We do not share your information with third parties except as described in this policy.
Information You Provide
Email Address
When you sign in using our magic link authentication, we collect your email address. This is your account identifier and the address we use to send you sign-in links.
Pattern Submissions
When you submit a regex pattern for review, we collect the pattern title, description, category, the regex string itself, test cases, and any implementation notes you provide. Submissions are stored in our database and reviewed by our team.
Support Messages
When you contact us via the support form, we collect your email address, subject, and message. This information is used solely to respond to your inquiry.
Waitlist Signups
If you sign up for the RegexVault API waitlist, we collect your email address and optionally your stated use case. This is used to notify you when API access becomes available.
Information Collected Automatically
Server Logs
Our hosting infrastructure (Vercel) automatically logs standard server request data including IP address, request path, HTTP method, response code, and timestamp. These logs are retained for infrastructure and security purposes and are not used for user profiling.
API Usage
When you use the Live Tester or our API routes, the regex pattern and test input you submit are processed server-side and immediately discarded after the response is returned. We do not log or store the content of live tester requests.
Information We Do Not Collect
- ✓We do not track which specific patterns you view or copy
- ✓We do not use advertising networks or tracking pixels
- ✓We do not collect device fingerprinting data
- ✓We do not collect your browsing history across other sites
- ✓We do not collect biometric or sensitive personal data
We use the information we collect for the following purposes:
To provide and operate the service
Your email address is used to authenticate you via magic link, maintain your session, and identify your account for bookmarks, submissions, and subscription status.
To process payments
Payment processing is handled entirely by Stripe. We pass your chosen billing plan to Stripe; we do not store your payment card details. Stripe returns a subscription status that we use to determine your access level.
To send transactional emails
We send sign-in magic links and, where applicable, subscription-related notifications to your email address. We do not send marketing emails without your explicit consent.
To review pattern submissions
Submitted patterns, test cases, and notes are used by our team to evaluate and curate additions to the RegexVault library.
To respond to support requests
Support messages and the associated email are used solely to respond to your inquiry. We do not use support messages for marketing.
To maintain service security
Server logs and rate-limiting data (IP-based request counts) are used to detect and prevent abuse, enforce rate limits, and maintain the integrity of the service.
RegexVault uses the following third-party services to operate. Each has its own privacy policy governing how they handle data.
Supabase
Authentication & DatabaseWe use Supabase to manage user authentication (magic link email sign-in) and to store account data including email address, bookmarks, and pattern submissions. Data is stored on Supabase-managed infrastructure. Supabase Privacy Policy: supabase.com/privacy
Stripe
Payment ProcessingStripe handles all payment processing for Pro subscriptions and one-time purchases. When you upgrade, you are redirected to a Stripe-hosted checkout page. RegexVault does not see or store your payment card details. Stripe may collect billing name, card details, and billing address as required for payment. Stripe Privacy Policy: stripe.com/privacy
Resend
Transactional EmailWe use Resend to deliver transactional emails including magic sign-in links and support responses. Your email address is transmitted to Resend for the purpose of delivery. Resend Privacy Policy: resend.com/privacy
Vercel
Hosting & InfrastructureRegexVault is hosted on Vercel. Vercel processes server requests and maintains infrastructure logs including IP addresses and request metadata. Vercel Privacy Policy: vercel.com/legal/privacy-policy
Account data (email)
Retained while your account is active. Deleted within 30 days of an account deletion request.
Bookmarks
Retained while your account is active. Deleted automatically when your account is deleted (cascading delete).
Pattern submissions
Retained indefinitely once approved and added to the library (as part of the public pattern record). Unapproved or rejected submissions are retained for 90 days, then deleted.
Support messages
Retained for 12 months for reference, then deleted.
Waitlist entries
Retained until you request removal or the API waitlist program ends.
Server logs
Retained by Vercel per their standard retention policies (typically 30 days).
Depending on your location, you may have rights regarding your personal data under applicable privacy laws (including GDPR for EU residents and CCPA for California residents). These include:
You can request a copy of the personal data we hold about you.
You can request that inaccurate data about you be corrected.
You can request that we delete your account and associated personal data. Some data may be retained where we have a legal obligation or legitimate interest.
You can request your data in a structured, machine-readable format.
You can object to processing of your data where we rely on legitimate interests as the legal basis.
Where processing is based on your consent, you can withdraw it at any time. This does not affect processing that occurred before withdrawal.
To exercise any of these rights, contact us at support@regexvault.io. We will respond within 30 days.
RegexVault is intended for developers and technical professionals. We do not knowingly collect personal information from children under the age of 13 (or 16 in the EU). If you believe a child has provided us with personal information, please contact us at support@regexvault.io and we will delete it promptly.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If we make material changes, we will notify registered users via email. Continued use of RegexVault after changes are posted constitutes your acceptance of the updated policy.
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
You can also reach us using the on this site.