Privacy
Last updated 26 July 2026
The short version: we store your email so we know who you are, the name of each app you deploy, and the addresses you share with. We do not store your source code, and we cannot read the contents of your app.
What we store
If you deploy apps
- Your GitHub user id, username, and verified email address, so we know which apps are yours.
- The full name of each repository you deploy, and the subdomain assigned to it.
- Environment variables you choose to pass us, encrypted with AES 256 GCM and only decrypted to inject into your running app.
- Build logs and deployment history, so you can debug a failed build.
- An access token for your coding agent, stored only as a hash. The original is on your machine.
If you open an app someone shared
- Your verified email address, checked against the guest list for that app.
- A sign in session, held in a cookie on your device, valid for thirty days.
What we do not store
- Your source code. It is cloned to build your app and the working copy is deleted immediately afterwards. It lives in your GitHub account, not ours.
- Anything inside your running app. Whatever your app saves belongs to your app, on disk, and is not readable by us through any product feature.
- Passwords. Sign in is handled by GitHub and Google. We never see a password.
- Secrets in logs. Tokens, cookies, and environment values are stripped before anything is written to a log.
What we access on GitHub
Read only, and only for the repositories you explicitly install the app on. We can read code in order to build it. We cannot push, create, delete, or modify anything. You can revoke this at any time in your GitHub settings, and we lose access immediately.
Who else sees your data
We do not sell data and we do not run advertising. Data is processed by the services that keep the platform running: our own server, GitHub and Google for sign in, Cloudflare for DNS, and Sentry for crash reports. Crash reports have cookies and authorisation headers removed before they are sent.
Where it is stored
On a single server we operate, with encrypted backups. If you run unlocalhost yourself, none of your data reaches us at all. Same software, your machine, your rules.
Deleting your data
Ask your agent to delete an app and its record, guest list, environment variables, and logs are removed. To delete your account entirely, open an issue or email us and we will remove everything within thirty days.
Contact
Questions or requests go to our issue tracker. Security problems should follow the disclosure process in SECURITY.md instead of a public issue.