Privacy

We store what the app needs to work and nothing else. There is no analytics script, no advertising pixel, and no third-party tracker on any page.

• Account — your name, email address, an optional avatar URL, and either a hashed password or an OAuth account link. Passwords are hashed; we never see or store the plaintext.
• Sessions — a session token, its expiry, and the IP address and user agent it was created from, so you can stay signed in and we can invalidate a session.
• Your work — the projects, watchlist entries and usage figures you create.
• Contact messages — whatever you type into the contact form, so we can read and answer it.

One cookie: the session token that keeps you signed in. It is HTTP-only, same-site, and set only after you sign in. There are no cookies for advertising or analytics, which is why there is no consent banner.

The application runs on Vercel and the database is hosted Postgres; both process data on our behalf as infrastructure providers. If you sign in with GitHub or Google, that provider confirms your identity to us and we receive your name, email and avatar. We do not sell data or share it with anyone else.

Account data lasts until you ask us to delete it. Sessions expire after 30 days. Deleting a project removes it and its usage history immediately.

You can edit your profile in settings, delete any project you own, and sign out to end a session. To have your account and everything attached to it erased, ask via the contact form — deletion cascades to your projects, usage and watchlist.

If you self-host this software, you control the database and this page describes your deployment, not ours.