Privacy
Draft, pending legal review
What this website collects
This notice covers eddyline.app and get.eddyline.app. It is short because we collect very little.
- No cookies. The site sets none.
- No analytics or tracking scripts. Page views come from the server-side request counts of our host, not from anything running in your browser.
- No third-party requests from any page. Fonts, images and scripts all come from eddyline.app. That includes the trial form.
- Access logs. Caddy keeps access logs on our own server. We summarize them by path and day, and delete the raw logs, which include IP addresses, after 7 days.
What we keep when you ask for something
- Trial ledger. When you start a trial we record your email, company name, licence id and the trial dates. We keep that record until 12 months after the trial ends, unless you buy, in which case it becomes part of your order record.
- Email. Trial and order emails are sent through SMTP2GO.
- Payments. Stripe is the merchant of record for payments, through Stripe Managed Payments. Stripe collects and holds your payment details. We never see your card number.
- Design partner questionnaire. Answers are deleted from this site 15 months after purchase. Each answer is also copied as an issue into SectorFlow’s own Eddyline, where it is kept as product feedback. We delete it on request to hello@eddyline.app.
What leaves the server
The privacy claim is that we collect nothing from your install. To make that checkable, this table lists every outbound connection an Eddyline install makes. Nothing is added to it without a change to the product specification.
| From | To | When | Can it be turned off |
|---|---|---|---|
| App | get.eddyline.app/releases.json | Once a day | Yes, UPDATE_CHECK=false |
| App | The customer’s SMTP server or SendGrid | When mail is sent | Yes, by not setting up mail |
| App | Google sign-in | Yes, by not setting it up | |
| App and users’ browsers | The customer’s OpenID Connect provider | OpenID Connect sign-in | Yes, by not setting it up |
| Users’ browsers | Google’s image host | Showing avatars of people who signed in with Google | Not yet |
| Caddy | Let’s Encrypt | Certificate issue and renewal | Only with --no-tls |
Installer and update | Docker’s apt repo, GHCR, Docker Hub (Caddy and Postgres images), get.eddyline.app | Install and update only | No, they fetch the software |
Avatars of people who signed in with Google load from Google’s image host. A later release serves them from your own server.
The app sends SectorFlow no telemetry, no usage data and no licence checks. The releases host keeps only aggregate request counts.
Questions
Write to hello@eddyline.app.