Privacy policy

Coming soon.

Sole proprietor (EI).

SIREN: 100 689 637. SIRET: 100 689 637 00013. View the official business record.

For privacy enquiries: [email protected].

Your email address and account identifiers are used to manage your access and requests, based on providing the service you request. Without this required information, we cannot create your account or deliver your purchase. GitHub sign-in and passkey registration are optional.

Order, payment, subscription and instance information is used to perform the contract and deliver licenses. Billing records also support accounting and tax obligations. Authentication and processing records protect the service and prevent abuse, based on our legitimate interest in securing accounts. We also keep withdrawal declarations, acknowledgements and review records to handle your request and document its outcome.

Stripe collects payment-card details on its own pages. The portal stores payment references, not full card details. GitHub identifiers, authentication public keys and recovery-code hashes are used when you enable those features.

When you open a support ticket, we store its category, messages, optional subscription reference and activity history to respond to your request and protect the service. Tickets belong to your account and are accessible to authorized support staff. Notification emails contain a ticket reference and a protected portal link, not your conversation.

Contact us to request access, redaction or erasure of support information. We review these requests alongside applicable record-keeping obligations.

OVHcloud provides hosting for the portal, email delivery and storage for encrypted backups. Cloudflare handles web traffic and helps protect the website; it processes connection information, including IP addresses and web requests.

Authorized administrators and support staff can access information needed to manage accounts and respond to requests. If you use GitHub sign-in, GitHub processes the sign-in request. When payments are available, Stripe processes payments on its own pages.

Our encrypted backups are stored in OVHcloud's Paris region in France. This storage location does not mean that every provider processes information only within the European Economic Area (EEA).

Cloudflare may process website traffic data outside the EEA. Its Data Processing Addendum describes its use of the EU–US Data Privacy Framework and European Commission standard contractual clauses for transfers where applicable.

If you use GitHub sign-in, GitHub may process personal information in the United States and other countries. Its privacy statement describes the transfer safeguards it uses, including standard contractual clauses. When payments are available and you use Stripe, Stripe may transfer payment-related information outside the EEA, including to the United States. Its privacy policy describes applicable adequacy decisions, standard contractual clauses and the EU–US Data Privacy Framework.

These safeguards are intended to protect personal information when it is transferred abroad. For questions about transfers or to request information about the relevant safeguards, contact [email protected].

An hourly cleanup removes sign-in link records and sessions once they have been expired for more than one day. Revoked sessions are also removed after one day. Expired authentication challenges and rate-limit records are removed during cleanup.

Encrypted backups on OVHcloud follow a retention schedule of 7 daily, 4 weekly and 3 monthly snapshots. The latest successful backup is retained. Older snapshots are removed during successful backup maintenance, so information removed from the portal may remain in retained backups.

Account and support records do not currently have automatic deletion periods. Detailed retention periods for these and other records are coming soon. To request erasure, write to [email protected].

A session cookie supports sign-in. Signed-in appearance preferences are saved to your account. Guest appearance choices are saved in your browser. License keys and account data are not saved in browser local storage. Our server retrieves public release information from GitHub. Following links to GitHub, using GitHub sign-in or proceeding to Stripe payment pages takes you to those providers, which receive the technical information associated with your visit.

When enabled, self-hosted analytics on our OVHcloud server measures visits and selected actions according to your choice. Accept all enables full analytics. Reject non-essentials enables the limited basic analytics below. No analytics events are sent before a choice or after it expires.

Basic analytics records visits to Home, Editions, Roadmap, Changelog and Contact. On these pages, it records opening the demo, documentation, GitHub or installation guide; selecting Team; opening the installation section; and successfully copying an installation command. Basic events have no extra labels for destination, position or command step.

Full analytics also measures policy pages, Team checkout, account overview, licenses, billing and the support inbox, plus actions such as requesting a license download or billing redirect. Selected actions can include fixed labels for destination category, page position and installation-command step (download or start). We do not send link URLs or copied text. These actions indicate interest, not completed installations or purchases.

Both modes exclude email addresses, account and order identifiers, license contents, support conversations, URL queries and fragments. Sign-in, account security, individual tickets and administration pages are excluded. We do not record screens or keystrokes.

In both modes, our analytics system processes connection information, including your IP address and browser information, to derive pseudonymous visitor identifiers and basic device and geographic statistics. These identifiers let us estimate returning visits within the same UTC calendar month and change at the start of the next month. Separate visit counts use hourly grouping in our integration, not exact browser sessions. Changes to your network or browser can make you appear as a new visitor, while people sharing an IP address and browser type can be grouped together. Raw IP addresses are not stored in its analytics database, and these statistics are not linked to your customer account or documentation-site visits. Choosing Reject non-essentials or Accept all, or saving Basic or Full in preferences, takes precedence over Global Privacy Control for this site while your choice remains valid. Browser Do Not Track prevents collection in both modes.

Open Analytics preferences in the website or portal footer. Basic is preselected if you have no saved choice; collection waits for confirmation. To stop collection, select Off and click Save preferences. Closing the dialog leaves your current choice unchanged. Your choice does not affect access, purchases or support.

Your browser remembers your choice for 180 days. Analytics events are removed after 90 days by daily maintenance; isolated recovery copies are kept for up to seven additional days. We use these statistics to improve the website and portal, without advertising or cross-site tracking.

Depending on the processing and applicable conditions, you may request access, correction, erasure, restriction or portability of your data, or object to processing. Where processing relies on consent, you may withdraw it. Write to [email protected]; we will verify your identity proportionately.

You may lodge a complaint with the French data protection authority, CNIL. An erasure request does not itself cancel your subscription. Some records must be retained to meet applicable obligations.