Privacy Policy

Last updated: July 6, 2026

Pushdeck collects only what is necessary to run your deployments. We do not sell, share, or trade your data with anyone.

What we collect

• Account information Your name and email address when you register, and a hashed password. We never store your plaintext password.
• Server details Hostname, port, username, and SSH private key. The private key is stored encrypted and only decrypted in memory at the moment it is needed to open a connection.
• Repository details Provider (GitHub or GitLab), repository name, branch, and a personal access token. The token is stored encrypted, used only to clone your repository, and never appears in logs.
• Environment variables If you use the Environment tab, your .env content is encrypted with a key you supply before it is written to our database. That key is never saved to our database, session, or logs, so without it the stored ciphertext cannot be decrypted.
• Deployment history Timestamps, commit hashes, status, and the output from each deployment step.

How we use it

We use your data for one purpose: to run deployments on your behalf. This means connecting to your servers over SSH, cloning your repository, running your hooks, and showing you the results. Nothing else.

We do not share your data

We do not sell, rent, share, or disclose your data to any third party. The only external services involved are the ones you configure yourself: your own servers and your own git host.

We may disclose data if required by law, but we will notify you unless prohibited from doing so.

How we protect it

All traffic between your browser and Pushdeck is over HTTPS. SSH keys and repository tokens are encrypted before being written to the database. Environment variable content is encrypted with a key you supply that we never store, so the ciphertext we hold cannot be decrypted without it.

Cookies and analytics

We use a session cookie to keep you logged in. We do not use any advertising cookies.

We use Google Analytics to understand how the site is used so we can improve it. Google Analytics sets its own cookies (such as _ga) and, when you are signed in, we pass it your account identifier so we can recognise returning usage. We do not use this data for advertising and we do not sell it.

Deleting your account

You can delete your account at any time from Account Settings. Deleting your account immediately removes your projects, servers, repositories, deployment history, encrypted environment variables and SSH keys, and your team memberships, and signs you out. Your email address is released right away, so you are free to start over with a clean account whenever you like. This action is irreversible.

Data retention

After you delete your account, residual copies in our operational stores and backups are retained for up to 30 days to meet legal and operational requirements, after which they are permanently erased. This window follows widely accepted data-protection practice, ensuring personal data is removed without undue delay.

Contact

If you have questions about this policy or how your data is handled, please reach out. We take privacy seriously and will respond promptly.