Privacy Policy

What you can do without an account

Browsing, searching and reading tool pages needs no sign-in and sets no tracking cookies. Our web server keeps standard access logs (IP address, time, requested page) for security and debugging. There are no advertising or analytics trackers on Conduit.

What we collect when you sign in

Sign-in uses Google or GitHub only. We never see or store a password. From the provider we receive:

• your name, email address and profile picture URL;
• your provider account ID, so we recognise you the next time you sign in.

We request only the basic profile scopes (Google: openid email profile; GitHub: read:user user:email). We do not read your Google data, your Gmail, your Drive, or your GitHub repositories, and we do not post anything on your behalf.

What we store while you use the site

• Session: a cookie that keeps you signed in. Only a hash of its token is stored on our server, with the browser name and expiry.
• Bookmarks: the tools you save.
• Projects you submit: the public repository URL and the public information we read from it (name, description, README, licence, stars).
• Usage counters: daily counts of tool calls and traffic, once cloud tools are available, to apply fair-use limits.
• Security log: administrative and security-relevant actions, without secrets.

How we use it

To sign you in, show your dashboard, list the projects you submit, keep the service within fair-use limits and keep it secure. We do not sell your data, do not use it for advertising and do not share it with third parties for their own purposes.

Who processes it

The site runs on our own server. DNS is provided by Cloudflare. Google and GitHub process your sign-in under their own privacy policies. We do not use any other third-party processors.

Retention and deletion

Account data is kept until you delete your account. You can do this yourself in your dashboard: it permanently removes your profile, linked sign-in providers, sessions, bookmarks and usage counters. Projects you submitted stay listed as anonymous public entries unless you ask for their removal. Sessions expire automatically. Access logs are kept for a limited time for security.

Cookies

We set a session cookie only after you sign in, and a short-lived cookie during the sign-in handshake. A theme preference may be stored in your browser. None of these are used for tracking.

Changes

If this policy changes in a meaningful way, the date above changes with it.

Contact

You can delete your account and its data yourself at any time from your dashboard.