Privacy policy
Last updated October 23, 2026
This policy explains how Wisty Labs AS handles personal data when you visit ui.wisty.ai, install components from its registry, let a coding agent use its MCP server or subscribe to its email updates.
Who we are
Wisty Labs AS, org. nr. 938 423 490, Elisenbergveien 34, 0263 Oslo, Norway ("Wisty", "we") is the controller for the personal data described here. Contact legal@wisty.ai with questions or requests. Wisty UI and the Wisty app builder are run by the same company; this policy covers Wisty UI, and the Wisty privacy policy covers the app builder.
What we collect
| Data | What it is | Where it comes from |
|---|---|---|
| Email updates | Your email address, the IP address you subscribed from, and when you subscribed and unsubscribed. | You |
| Server logs | The IP address, browser and address of each request, kept by our hosting provider for security and reliability. | Your browser or agent |
| Usage analytics | How the site, its registry, its docs and its MCP server are used, such as the pages viewed and the searches made. No IP address is stored. | Your browser or agent |
| Support | What you write to us and our replies. | You |
We measure usage with PostHog, without cookies or other storage on your device. On the site, PostHog derives a daily identifier from your IP address, browser and the site's address, then discards the IP address. Requests to the registry and calls from coding agents are counted one by one, with nothing that links them to you. If your browser sends a Do Not Track or Global Privacy Control signal, the site's analytics script sends nothing. We still record requests to the site and calls from coding agents, without the IP address. We use no advertising identifiers or cross-site tracking.
The site sets no cookies. Choices you make on the site, such as its theme, color mode and package manager, are saved in your browser's local storage so they last between visits. They are strictly necessary for the settings you asked for, so no cookie banner is shown. When you change one, the change itself is part of the usage analytics above.
Why we use it and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Sending you email updates about new components and Wisty | Email updates | Your consent, which you can withdraw at any time with the unsubscribe link in every email |
| Keeping the service secure and preventing abuse | Server logs, email updates | Our legitimate interest in a service that works and is not misused |
| Answering your requests | Support | Our legitimate interest in supporting the people who use the service |
| Learning which components, pages and agent tools people use, and what they search for and don't find, so we can decide what to build and fix | Usage analytics | Our legitimate interest in improving the service. You may object at any time |
We do not sell personal data, use it for advertising, or use it to train AI models.
Who processes it for us
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Hosting of the website, registry and MCP server, and the server logs, as our processor | United States, with a global network |
| PostHog Inc. | Usage analytics, as our processor | European Union (Frankfurt) |
| Astrodon Corporation (Loops) | Sending email updates and keeping the list of subscribers, as our processor | United States |
We may also disclose personal data where the law requires it or where necessary to protect the service and the people using it.
International transfers
Wisty is established in Norway. PostHog stores usage analytics in the European Union. Vercel and Loops process data in the United States. Each is either certified under the EU-US Data Privacy Framework or bound by the European Commission's Standard Contractual Clauses, with supplementary measures where required. Contact us for a copy of the safeguards that apply to your data.
How long we keep it
| Data | Retention |
|---|---|
| Email updates | Until you ask us to delete it. If you unsubscribe, the address stays on the list marked as unsubscribed, so it isn't emailed again. |
| Server logs | Up to 30 days. |
| Usage analytics | Up to 7 years. |
| Support | As long as needed to resolve the matter and keep a record for related follow-up or claims. |
Your rights
You may ask for access to your personal data, correction, deletion, restriction or portability, and you may object to processing based on our legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier processing; the unsubscribe link in every email does this for email updates.
To stop the site's analytics script in your browser, turn on its Do Not Track or Global Privacy Control setting. Because the analytics identifier changes every day and holds no IP address, we usually cannot match usage analytics to a request for access, deletion or objection.
Send requests to legal@wisty.ai. We reply within one month and may need to verify your identity. You may complain to Datatilsynet, the Norwegian Data Protection Authority, or to the authority where you live or work.
Changes and contact
We post changes to this policy on this page. The date at the top identifies the current version.
Wisty Labs AS, org. nr. 938 423 490, Elisenbergveien 34, 0263 Oslo, Norway. Privacy questions and requests: legal@wisty.ai.