Privacy notice — draft

Draft pending final owner approval. Fidrail is an assisted free beta for public repositories. Technical website hosting does not open the public beta. Customer sign-in and inquiries remain unavailable while email, spam protection and final policy setup are pending. Please do not submit personal or repository details yet.

What Fidrail stores

Your Fidrail-owned email-code identity, opaque PostgreSQL sessions, short-lived hashed verification codes and pseudonymous rate counters, owner identity and email, public repository identifiers and exact revisions, review questions/scope, state events, reports and source references, responses, report feedback, inquiries and actual access/operator records. There are no payments, third-party advertising or tracking scripts. Fonts are served locally.

Where data is handled

Fidrail has its own backend and PostgreSQL on a shared host, independent of other projects. Host region, final operator contact inbox and assisted-source processing/provider details remain pending owner-supplied facts. Private R2 and email are implemented interfaces whose live permissions/delivery are unverified.

Retention and deletion

Completed request/report content: 30 days from terminal completion or latest correction. Active requests remain until resolved. Inquiries, access and delivery records: 30 days. Content-free deletion/operator records and a pseudonymous identity-deletion guard: 90 days. Minimum content-free acknowledgement proof-use tracking can remain while an older upload attempt is unresolved. Codes are valid for 5 minutes; sessions last at most24 hours without automatic refresh. Expired verification/session rows are removed by hourly retention. Ordinary abandoned onboarding rows are cleaned after15 minutes by that worker (nominal75 minutes while healthy); suspended/bootstrap identity records are intentionally retained until account deletion. The guard prevents deleted identities/emails from recreating an account; it is not anonymous data.

Account deletion revokes access immediately and erases retained identity/content under the data-handling policy. Physical deletion remains pending while a remote upload outcome or owned backup copy is unresolved. Manual backups have a 7-day maximum retention and require recorded operator expiry. Delivered email cannot be unsent; provider retention facts remain pending.

Use Account to delete retained data. The operator contact address is awaiting configuration; no unverified address is published.