Privacy

Draft — pending legal review

What we store

  • Your account: name, email, a password hash if you set one, and linked GitHub or Google identities.
  • Sessions: the device's user agent, IP address and last-active time, so you can review and revoke them.
  • Configuration you create: projects, environments, variables, pipeline definitions and execution history, including step logs.
  • Secrets and connection credentials, encrypted at rest and never displayed after saving.

What stays in your cluster

Builds, deployments and the data they touch run in your own Kubernetes cluster. Hephaestus does not host your compute.

Cookies

We use a single http-only session cookie to keep you signed in. No advertising or cross-site tracking cookies are set.