ShipKudos / privacy

Your progress. Your choice.

What we store

After GitHub authorization we store account identity, email for authentication, encrypted OAuth credentials, public profile information and daily public contribution counters. We store session information for access control. We do not request private repository access.

Publication and agent access

Your profile is published only after acceptance. You can unpublish, revoke any delegated agent key or delete your account in the dashboard. Agent secrets are hashed, limited to specific permissions and expire after 90 days. Delegated agents do not receive GitHub tokens.

Advertising and enquiries

We record deduplicated advertisement exposure and click events, retaining individual events for 48 hours and daily campaign totals for 12 months. We do not install advertiser tracking scripts. Commercial enquiries are available only to administrators. We use essential authentication cookies; no cross-site advertising cookie is required.

Retention and deletion

Detailed activity is retained for 60 days and daily rank history for 30 days. Pending registrations expire after 15 minutes; expired entries are removed within 24 hours. Deletion removes account data from the active database. Server-managed backups may retain older data until their retention period ends.

Contact

For privacy requests, open a private contact through the operator's GitHub profile or use the commercial contact form with a privacy-related message. Never send credentials or private repository content.