Privacy Policy

Introduction

BuildInPublicLog ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

GitHub OAuth Data

When you sign in with GitHub, we collect:

• GitHub user ID
• GitHub username
• GitHub profile avatar URL
• Email address (if provided by GitHub)
• GitHub access token (encrypted and stored securely)

Commit Metadata

For repositories you choose to track (both public and private), we collect commit metadata:

• Commit dates and times
• Commit SHAs (unique identifiers)
• Repository names and IDs
• Whether a repository is public or private

Critical Privacy Guarantee:

• We NEVER access your source code or file contents
• We NEVER write to your repositories
• We ONLY read commit metadata through the GitHub API
• Private repository support is included - we handle private repos the same as public repos (metadata only)

Note: While we request the repo OAuth scope (which technically allows write access), this is required by GitHub to access private repositories. We only use this permission to read commit metadata. We do not access, modify, or store your source code.

User-Provided Data

• Timezone preference
• Profile visibility preference (public/private)
• Manual ship entries (description and date)
• Selected repositories to track

How We Use Your Information

We use the collected information to:

• Calculate your shipping streaks and statistics
• Display your public profile (if you've enabled it)
• Show you on the leaderboard (if your profile is public)
• Sync your GitHub commits and update your stats
• Provide personalized dashboards and analytics
• Improve and maintain our service

Data Storage and Security

We implement appropriate security measures to protect your data:

• Encryption: GitHub access tokens are encrypted at rest using industry-standard encryption
• Secure Storage: All data is stored in secure, access-controlled databases
• HTTPS: All data transmission uses HTTPS encryption
• Limited Access: Only authorized personnel have access to user data

Third-Party Services

We use the following third-party services:

• GitHub OAuth: For authentication and repository access
• GitHub API: To fetch commit data from your repositories
• Database Hosting: For secure data storage

These services have their own privacy policies. We recommend reviewing them.

Cookies and Tracking

We use session cookies to maintain your login state. We do not use third-party tracking cookies or sell your data to advertisers. Any ads displayed on the platform are clearly labeled and do not track you across other websites.

Your Rights and Choices

You have the right to:

• Access Your Data: View all data we've collected about you in your dashboard
• Control Visibility: Make your profile public or private at any time
• Manage Tracking: Enable or disable tracking for specific repositories
• Delete Your Account: Permanently delete your account and all associated data
• Revoke Access: Disconnect BuildInPublicLog from your GitHub account via GitHub settings

Data Deletion

You can delete your account at any time from your dashboard settings (Danger Zone). This will permanently remove:

• Your profile information
• All tracked repositories
• All ship events and commit data
• Weekly statistics and streak data
• Badges and achievements
• Encrypted access tokens

This action cannot be undone. You will be immediately signed out and all your data will be permanently deleted.

Children's Privacy

Our service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this policy. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please open an issue on our GitHub repository or contact us via email.