Privacy
Last updated 22 August 2026
The short version
If you never sign in, we hold nothing about you beyond ordinary web server logs. The engine sends us nothing — you can verify that yourself, and the method is documented. If you do sign in, we hold the least we can get away with and you can delete it.
What we store if you have an account
| Data | Why |
|---|---|
| GitHub name, email, avatar | To identify your account and send alerts you asked for. |
| Hashed sync tokens | To authenticate leas sync. Plaintext is never stored. |
| Build and update records | The dashboard you are paying for. |
| Credential metadata | A name, an expiry date, a truncated public fingerprint — so we can warn you before something lapses. |
| Stripe customer id | To connect your account to a subscription. We never see card details. |
What we never store
Signing material of any kind. No certificates, private keys, keystores, provisioning profiles, or API keys. Not encrypted, not temporarily — there is no endpoint that accepts them. We also do not store your source code, because builds run on your machines and not ours.
Who else touches it
Only what the service needs to run:
- Vercel — hosting and blob storage.
- Neon — the database.
- GitHub — sign-in only.
- Stripe — payments, for paid plans.
- Resend — alert email, if you enable it.
- Slack — only if you paste a webhook URL yourself.
We do not sell data, we do not share it for advertising, and we run no third-party analytics or advertising trackers on this site.
Cookies
One session cookie, set when you sign in, so you stay signed in. There are no advertising or analytics cookies, which is why this site has no consent banner — there is nothing to consent to.
How long
Build history for as long as your plan retains it, or until you delete the project. Account records until you delete your account, after which everything is removed within 30 days except what we must keep for tax and accounting.
Your rights
Ask for a copy of your data, a correction, or deletion, and we will do it. Deleting a project removes its stored snapshot; deleting your account removes everything. Email hello@leas.dev and we will respond within 30 days.