Privacy
What we store, and why.
This website
ubrella.dev is a static site served by Cloudflare. Cloudflare processes connection data (IP address, user agent, requested URL) to deliver the site and defend it; we do not receive these logs in identifiable form. Typefaces are served from this domain.
Analytics (PostHog)
We use PostHog, hosted in the EU (Frankfurt), to understand how the site is used and to improve it. Requests go to m.ubrella.dev, a proxy under our control that forwards to PostHog's EU cloud. What is collected:
- Page views and navigation — pages visited, referrer, time on page, screen size, browser and operating system, approximate location derived from your IP (country and city; the IP itself is not stored).
- Interactions — clicks, scrolling and form submissions (autocapture, heatmaps, dead clicks). The content of form fields is never recorded.
- Errors and performance — JavaScript errors and page-load timings.
PostHog sets first-party cookies and local-storage entries on ubrella.dev to recognise a returning browser (a random identifier, no name or email) and to keep a session together. If you join the waitlist, that identifier is linked to your email address so we can see which page convinced you. Retention: event data 7 years or until you ask us to delete it. We do not record session replays on this site.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding and improving a small product) for aggregate measurement; consent under § 25 TTDSG / Art. 6(1)(a) GDPR for the cookies. You can opt out at any time with the switch below — it sets a single opt-out marker and stops all collection in this browser. Do-Not-Track and Global Privacy Control are honoured automatically.
Waitlist
If you join the waitlist we store your email address, the time you signed up and which form you used. It is kept in two places: as a contact in Resend (our email provider, Resend Inc., USA — covered by the EU-US Data Privacy Framework and standard contractual clauses), from where the invitation will be sent, and as a copy in a Cloudflare KV store in the EU jurisdiction. It is used for exactly one purpose: to write to you once, when your spot in the beta opens. We do not send a newsletter and we do not share the address. The signup is also recorded as an event in PostHog (see above), linked to your analytics identifier. Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract at your request). Email hello@ubrella.dev at any time to be removed.
Signing in
You sign in to the product with Apple, Google or GitHub. The provider tells us your email address (with Apple, possibly a private relay address), your name if you share it, and an account identifier; we keep these in our authentication database in the European Union (Supabase) to recognise you on the next sign-in. We receive no password and no access to anything else in that account. If Google and GitHub report the same verified email address, both sign-ins lead to the same Ubrella account. Legal basis: Art. 6(1)(b) GDPR (providing the account you asked for). Deleting your account deletes these records; you can also remove Ubrella's access in your Apple, Google or GitHub account settings.
Daily brief by email and push
Each morning, as soon as your brief is written, Ubrella sends it to you. Email is on by default: the brief goes to your account's email address (with Apple, possibly a private relay address) through Resend (Resend Inc., USA — covered by the EU-US Data Privacy Framework and standard contractual clauses). Resend processes the address and the content of the email to deliver it and keeps delivery logs; our sending domain uses Resend's EU region, but Resend stores account data and logs in the USA. Open and click tracking are switched off. Every brief email has an unsubscribe link, and mail apps show their own one-click unsubscribe button; you can also turn the email off in Settings in the app or at app.ubrella.dev/account.
Push notifications are sent only if you allow them on your iPhone. The app then gives us a device token issued by Apple; we store it with your account in our database in the European Union and hand it to the Apple Push Notification service (Apple Inc., USA) with each notification. A notification contains counts only — for example “4 of 5 projects look normal” — never project names or item titles, because Apple can read what it delivers. Signing out removes that device's token; deleting your account deletes all of them. Turn push off in the app's Settings or in iOS Settings.
Neither channel is end-to-end encrypted: both are encrypted in transit, but the providers named here can read what they deliver. Legal basis: Art. 6(1)(b) GDPR (the brief is the service you signed up for); for push additionally your consent in the iOS prompt, which you can withdraw at any time.
The product (private beta)
When you connect an integration, Ubrella stores the credentials the provider issues (OAuth tokens or API keys) in a dedicated secrets store, never in ordinary database records, and uses them solely to read the data described in the docs for that integration. From that data we keep aggregates and daily snapshots — revenue per project per day, active-user counts, open pull-request counts, workflow results, and events such as “PR #182 merged”. We do not copy raw analytics events, source code, customer records or payment details. Data is stored on servers in the European Union. You can disconnect an integration at any time; its sources, metrics and events are deleted within 30 days. Deleting your workspace deletes everything.
Your rights
Access, rectification, erasure, restriction, portability and objection under Art. 15–21 GDPR, and the right to complain to a supervisory authority — for us, the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.