Privacy

An account is an email address and a password hash, held by the platform's auth service. Nothing else about you is collected.

What we store for a site

The archive you upload is stored so your site can be re-served after every restart — that is what makes a hosted site survive a reschedule. It is deleted with the site.

The artifact URL is public

Each site has an unguessable artifact URL that the cluster fetches without credentials. Anyone holding that URL can download the bundle. It serves the files you are already publishing at a public address — but do not treat a static bundle as private storage.

Environment values

Values you set for a service live only in a Kubernetes Secret in your own namespace. The API accepts them and never returns them; they are not written into the deployment record.

Deletion

Deleting a site tears down its namespace and removes its stored bundles. The artifact URL stops resolving immediately.