Privacy

Short, because there isn't much to say. No third-party trackers, no advertising, no selling or sharing of data. Last updated 10 November 2026.

btn.dev is run by Carlton Gibson, in Spain, who is the controller of the personal data it holds. Write to carlton@noumenal.es about anything here.

Just reading. You don't need an account to read public projects, and if you don't have one the site sets no cookies for you. I track basic traffic levels with self-hosted analytics: no cookies, no fingerprinting, no profile of you, and nothing sent to anyone else. The server keeps ordinary access logs, including IP addresses, for a short time for security and operations.

With an account. I store your username, your email address and what's needed to sign you in (your password, hashed, and any second factor you add). For each signed-in session I keep the IP address, the browser it reported and when it was last used, so you can see and end your sessions from your account. Three cookies are set: one keeps you signed in, one protects forms from forgery, and one remembers that this browser has signed in before, so the home page offers Sign in first. All three are strictly necessary or hold nothing about you, which is why there's no cookie banner.

What you post. Orgs, projects, threads, notes, comments, uploads and the CI results your runs post are stored so they can be shown to the people a project's settings allow: everyone, for a public project. A note left in a project's inbox is seen by you and that project's members. Your username is shown beside what you write.

Plans. If your org has a paid plan, I record its tier, its seats and until when it runs, and keep the invoices.

Who else touches it. Only services that work on my behalf: UpCloud, which hosts the site and its database in Madrid, and Amazon Web Services for sending the site's email (sign-in codes, invitations, account notices). Amazon's email service runs in the United States, under the EU's standard safeguards. Nobody else. No data is sold, shared or used for advertising.

How long. Account data is kept until you ask me to delete your account. What you wrote in other people's projects is part of their threads; when you ask for deletion, say whether to remove it or to keep it without your name. Invoices are kept for as long as Spanish tax and commercial law requires.

Your rights. You can ask for a copy of your data, have it corrected or deleted, or object to how it's used. Email me and I'll deal with it within a month. If you're not satisfied, you can complain to the Spanish data protection authority, the AEPD, or to the authority where you live.

The terms for using btn.dev are on the terms page.