Privacy Policy

1. What we collect

• Account data: your email address and a hashed password.
• Project data: your projects, the apps you install, the code you deploy, the data those apps store, and the GitHub repositories you connect.
• Operational data: logs and audit records needed to run and secure the platform.

2. Why we use it

We use this data to run the service: to let you sign in, build and run your apps, back them up, keep the platform secure, and send you password reset emails. We do not sell your data.

3. Cookies

We set one cookie that you need to stay signed in: a session cookie that holds a signed token (JWT). It is HttpOnly and expires after 8 hours. We do not use advertising or tracking cookies. The site may also remember your language choice. Some pages load a font from Fontshare, which means your browser contacts that service.

4. Where your data lives

Our servers run on Hetzner in Germany (European Union). Backups are stored in Amazon Web Services (AWS) S3.

5. Who else handles your data

These providers process data on our behalf:

• Hetzner: server hosting.
• Amazon Web Services: backup storage (S3) and transactional email delivery (SES). We send email only for password resets.
• GitHub: if you connect a repository, we read it to build your app.

6. How long we keep it

We keep your account and project data while your account is active. When you delete a project, its apps and data are removed from the running platform. Backups may still contain deleted data until they age out of the backup retention window. You can ask us to delete your account and the data tied to it.

7. Your rights

You can ask to see, correct, export or delete your personal data, and you can object to how we use it. If you are in the EU you can also complain to your local data protection authority.

8. Changes

If we change this policy we update the date at the top of this page.