Privacy Policy

What we collect

• GitHub sign-in: your GitHub ID, username, display name, avatar, and email address. We request no repository or organization access.
• Guest sessions: a random identifier stored in a cookie — no personal data.
• Service data: your subdomains, DNS records, and API/MCP tokens (stored hashed).
• Received emails: messages sent to your subdomain inbox, deleted automatically after 48 hours (90 days on Premium).
• Captured HTTP requests: method, headers, and body of requests to capture-enabled subdomains, deleted automatically after 48 hours (90 days on Premium).
• Usage analytics: we use Google Analytics and first-party funnel analytics. The first-party data contains a random visitor cookie, page path, and coarse product actions, but not subdomain names, email addresses, DNS values, or captured request contents. Standard server logs (IP address, user agent) are kept for abuse prevention.

How we use it

To operate the service: creating DNS records, routing email, authenticating you, enforcing per-account limits, and preventing abuse. We don't sell your data or use it for advertising.

Third parties

• Cloudflare — DNS hosting and traffic proxying for subdomains.
• GitHub — sign-in (OAuth).
• Google Analytics — website usage statistics.
• Resend — delivery of account emails (welcome message and warnings before stored data is deleted). Every such email contains an unsubscribe link, and we only send them to the address from your GitHub account.

Retention & deletion

Received emails are deleted after 48 hours (90 days on Premium). First-party funnel events and their random visitor identifiers are deleted after 180 days. Google Analytics retention is managed in Google Analytics. Deleting a subdomain removes its DNS records and stored emails immediately. To delete your account and all associated data, email [email protected] — we'll process it promptly.

Contact

Questions or abuse reports: [email protected] or github.com/oddunits/pntr-cli/issues. See also the Terms of Service.