privacy policy

the short version

your data is not our product. our product is helping you get your product off the ground. we collect the minimum amount of data needed to run the platform. we don't sell it, we don't share it with advertisers, and we don't do anything creepy with it.

what we collect

• account info: your email address, name (if you provide one), and avatar (from GitHub/Google if you use OAuth). we need this to know who you are.
• project data: your code, deployments, environment variables, form submissions, analytics events, and anything else you put into pushto services. this is your data. we store it to run the platform.
• usage data: basic server logs (IP addresses, request timestamps) for security and debugging. we don't build profiles from this.
• payment info: handled entirely by Stripe. we never see or store your credit card number. Stripe's privacy policy applies to payment data.

what we don't collect

• we don't use third-party tracking scripts on pushto.host
• we don't use advertising cookies or pixels
• we don't sell or share your data with anyone for advertising
• we don't read your code or project contents unless you ask us to debug something
• we don't track your users across the web (pushto analytics is privacy-friendly by design: no cookies, no fingerprinting)

cookies

we use one cookie: your session token for authentication. that's it. no tracking cookies, no analytics cookies, no "we use cookies to improve your experience" banner because there's nothing to consent to.

pushto analytics (the service we offer you)

pushto analytics, the service you can add to your own projects, is designed to be privacy-friendly. it doesn't use cookies, doesn't fingerprint visitors, and generates anonymous session IDs that reset daily. we can't identify individual visitors to your site, and neither can you. that's by design.

ai features

when you use pushto icons or the deploy failure explainer, your prompts and build logs are sent to Anthropic's API for processing. we don't store prompts beyond what's needed to deliver the feature. Anthropic's data policy applies to data processed by their API. generated icons are stored in your account if you save them.

data storage and security

• your data is stored on Supabase (PostgreSQL) and Cloudflare R2
• all connections are encrypted (TLS/SSL)
• environment variables are encrypted while stored
• we use row-level security on our database
• we don't have SOC 2 certification and we're honest about that

data deletion

delete your account and we delete everything: your projects, deployments, environment variables, form submissions, analytics data, saved icons, all of it. your live data is gone the moment you ask. the encrypted nightly backups are the one exception, and only briefly: they're locked against deletion for 30 days, then expire on their own. we couldn't erase them early if we wanted to, because we hold zero access to the backup store. no 90-day grace period. no "we keep backups for 7 years." 30 days at the outside, in a vault even we can't open.

third parties

• Supabase: database and authentication infrastructure
• Hetzner: the VPS that hosts pushto.host and your deployed projects
• Cloudflare: DNS, CDN, and file storage (R2)
• Stripe: payment processing
• Anthropic: AI features (icons, deploy explainer, voice support, onramp chat). when you use one, the content involved (your prompt, a build log, the conversation) is sent to Anthropic's API to generate the response. nothing goes there unless you invoke the feature

that's the full list. no hidden analytics providers, no ad networks, no data brokers.

changes

if we change this policy, we'll update this page and the date at the top. for major changes, we'll email you. we won't suddenly start selling your data. that would violate everything this company stands for.

contact

questions? email [email protected] and a real person will give you a real answer.