Privacy policy

Last updated October 2026. This describes product behavior reflected in the codebase.

What we store

When you sign in with GitHub, Better Auth stores your account, session, and linked OAuth account metadata. Organizations, projects, environments, and variables live in PostgreSQL. Secret variable values are encrypted with @collidr/crypto before persistence.

How we use data

Data is used to operate the dashboard, enforce permissions, send in-app notifications when enabled, and write audit events when audit is enabled. We do not sell personal data.

Third parties

Hosting (Vercel), database (Neon), and GitHub OAuth are required to run the service. MCP clients authenticate via the auth app and receive OAuth tokens scoped to the permissions you approve.

Your choices

Account settings support session management and account deletion flows exposed as user-scoped actions in the registry. Contact the repository owner for data requests related to self-hosted deployments.