Who operates this service
The operator of this instance operates this service. Contact: your instance administrator. The operator must confirm its identity, contact details, legal basis, retention periods, and any international transfers before inviting the public to register.
Information collected
The service stores your username, optional or required email address, and a password hash for direct sign-in. If you use Google, GitHub, or Apple, it stores the provider name, stable account identifier, and any name or email address supplied by that provider. It records your acceptance of this notice and the Terms of Service, your account status and permissions, and actions you take in a workspace. Verification, welcome, and password-reset emails are recorded in an email delivery log. The browser stores your session token in session storage and your chosen appearance preferences and cookie-notice acknowledgement in local storage. Short-lived protected cookies complete SSO sign-in. These sign-in and security technologies are essential to the requested service; there are no advertising or analytics cookies in the application.
Why it is used
The operator uses this information to create and secure accounts, approve waitlisted people, manage access, run projects, and keep an audit trail. Provider identities are never linked to local accounts by matching email. The software does not use personal information for advertising. The operator is responsible for choosing and publishing the lawful basis for each use; providing the service and protecting its security are the intended purposes of this default notice.
Sharing, storage, and retention
Account information and activity are stored in the instance database and any backups managed by the operator. The selected email provider processes outgoing email addresses and message contents; a chosen SSO provider also processes authentication under its own privacy notice. Other authorised workspace users may see the identity associated with your actions. The operator must define its hosting location, third-country transfer safeguards if relevant, and retention periods for email records, account data, and audit records; disabled accounts may retain records needed for accountability.
Your choices and rights
You may decline registration. Contact the operator to request access, correction, deletion, restriction, portability, or objection where applicable, or to ask about a complaint. You may also complain to your relevant data protection authority. The rights available depend on the operator's lawful basis and local law.
Changes
Each change to this notice is kept as a numbered version. The version you accepted is recorded with your registration. Contact your instance administrator with questions.