Privacy policy

This policy covers the hosted Nipa Lab service at nipalab.com. If you self-host Nipa, your server operator is responsible for your data and this policy does not apply.

What we store

• Account data: your name, email address, and a password hash if you set a password.
• Sign-in data: linked Google or GitHub identities, and the public half of any SSH keys you register.
• Your repositories: file contents are stored as content-addressed chunks, together with commit metadata, branches, tags, merge requests, comments and file locks.
• Notifications: the emails we send you about merge requests and reviews, and their delivery status.
• Operational data: server logs that include IP addresses and request paths, used for security, rate limiting and debugging.

What we do not do

• We do not sell your data or use your repositories for advertising.
• The marketing site uses no analytics and no tracking cookies. It is served through Netlify and our own edge proxy, which may log request metadata such as IP addresses.

Cookies

The app uses an HttpOnly cookie to keep you signed in and a short-lived cookie that binds a social sign-in to the browser that started it. Both are strictly necessary.

Sharing

Your data is visible to the people you give access to in an organization or project. We use infrastructure and email delivery providers to run the service, and they process data on our behalf.

Your choices

You can export your repositories at any time with the Nipa client. To delete your account or ask what we hold about you, write to [email protected].

Security

Report vulnerabilities to [email protected].