Last updated: September 19, 2026
Account data: your GitHub username, numeric user id, and primary email (as exposed by GitHub OAuth). We never ask for or store your GitHub password.
Project data: project names, repository URLs, domains, stack-detection metadata, heartbeat timestamps, SSL radar results.
Analytics data: if you connect an analytics provider (Cloudflare Web Analytics, GA4, Plausible, Umami), we store your read-only API credentials server-side and pull only aggregate visitor counts (30-day totals). We never receive individual visitor records, cookies, IP addresses or any personally identifiable information from those providers.
Usage telemetry: Google Analytics 4 runs on this site with IP anonymization and consent mode — it only activates if you click "OK, measure" on the cookie banner. No advertising or cross-site tracking cookies are ever set. If you decline or ignore the banner, no analytics cookies are stored.
Legal basis (GDPR Art. 6): contract performance (running your account and projects), legitimate interest (security, abuse prevention, service improvement), and consent (GA4 analytics).
You may request access, correction, export or deletion of your personal data at any time. The fastest route is account deletion in the dashboard (immediate, permanent erase within 24 hours) or opening a GitHub issue. There is no fee for any request.
Account and project data is retained while your account is active. Sessions expire after 30 days. Deleted accounts and their data are purged within 24 hours. Webhook and system logs are rotated after 30 days.
Privacy questions: open an issue at https://github.com/richter80/frankenstack/issues.