Privacy policy

What we collect

• Account data: your email address, display name, and OAuth provider identifiers when you sign in.
• Machine registrations: machine names, platforms, and activity timestamps linked to your account.
• CLI telemetry (opt-out): pseudonymous command usage, package and runtime names, durations, errors, platform information, and performance measurements.
• Website analytics: page paths or documentation URLs, interactions, performance measurements, referrer domains, campaign parameters, browser and device categories, and Cloudflare-provided country and city. Documentation analytics may retain a truncated user-agent string. Application analytics does not store your raw IP address.
• Security records: session times, IP addresses, user agents, and authentication or account-change audit events used to protect accounts and investigate abuse.

How we use data

We use data to provide and secure accounts, dashboards, support, and email; operate and improve OMG; measure reliability and feature adoption; prevent abuse; and satisfy legal obligations. We do not sell personal information or use it for targeted advertising.

Cookies and identifiers

Sign-in uses an essential secure session cookie. Public website analytics uses no cookies, local storage, or session storage. The analytics service derives a daily rotating pseudonymous visitor identifier from the request IP address and user agent; raw IP addresses may still appear in bounded security and authenticated-session records. Global Privacy Control and browser Do Not Track prevent public analytics from starting.

Service providers

Cloudflare provides hosting, database, network, security, and email infrastructure. GitHub provides OAuth sign-in. These providers process data needed to deliver their services under their own terms and privacy commitments.

Data retention

• Raw CLI and website analytics events: 90 days
• Raw documentation analytics events: 7 days; documentation sessions: 30 days
• Audit logs: 30 days
• Aggregate and per-machine usage statistics: 12 months
• Account and organization records: while needed to provide the service

Your rights

These rights are available to all users regardless of location:

• Access and portability: request a portable copy from support.
• Deletion: request deletion from support. Deletion is irreversible; audit logs are retained for 30 days for security purposes.
• Opt-out: request a telemetry opt-out from support.

Contact

Questions or requests regarding this policy can be sent to support@latham.cloud.