What we keep, and why.
The kit itself needs no account and sends nothing to us. This page covers the website and the account you can make on it, and describes only what the site's code does today.
What an account stores
- Email address. To sign you in, to send the messages below, and to match a payment to your account. For GitHub sign-in, it is the email GitHub gives us.
- Password hash. Never the password: a salted PBKDF2 hash. GitHub-only accounts have none.
- GitHub id, only if you sign in with GitHub, to recognise you next time.
- Sessions. A random token lives in an HttpOnly cookie in your browser; we store only its SHA-256 hash, with its start and end time. A session lasts 30 days or until you sign out.
- One-use email links (confirm your email, reset your password), also stored only as hashes. A confirm link lasts 24 hours and a reset link one hour; each is deleted when used.
- Purchases. When Polar tells us of a payment: the time you bought the kit, the date your updates run until, and the latest order id. We also keep the id and time of each payment notice we have applied, so a repeat is never applied twice. We do not receive or store your card details.
- Tester application. The time you applied. We also email it to support, with your address.
- Download consent. The time of your first ticked consent before a download.
- Email preferences. The time you asked to be sent the kit early, whether you have opted out of release emails, and a random token for the unsubscribe link. We record which release emails were sent to you, so none is sent twice.
- Rate-limit counters for sign-in, sign-up and email requests, keyed by your address or IP address, so guessing is slowed.
Visits to a link carrying ?ref= are counted per day, tag and page, with nothing about the visitor.
How long. Account data is kept until you ask us to delete the account. Expired sessions and rate-limit counters are not cleaned up automatically yet, so they too stay until deletion or are overwritten. Referral counts hold no personal data and are kept.
Who else handles it
- Cloudflare hosts the site (Pages), holds the account database (D1) and may show us aggregate visit statistics (Insights).
- Polar is the merchant of record for purchases. It takes payment, sends your receipt and handles tax, under its own privacy terms. We give it your email and account id when you go to checkout.
- Resend sends our email: confirm and reset links, release notices and tester notices.
- GitHub hosts the releases you download, and offers optional sign-in.
There are no advertising trackers on this site, and we do not sell or share your data for advertising.
Access and deletion
To see what we hold about you, or to have your account deleted, email [email protected] from the address on your account. Payment records held by Polar are Polar's to manage.