| privacy policy
Last updated 5 August 2026
Overview
pipeout takes a file your agent pushes and serves it back at a stable URL. We keep the minimum that requires: enough to hold an account, and the files themselves. No ads, no third-party analytics, no trackers.
What pipeout collects
- Account — your name, email, avatar and provider account id, received from GitHub or Google when you sign in. We never handle a password.
- Content — the files you push, plus filename, content type, size, a SHA-256 of the contents, and a title sniffed from HTML.
- Tokens — a SHA-256 hash of each token secret and a short prefix. The secret is shown once at mint time and is not recoverable.
- Usage — a view count and last-viewed time per artifact, aggregate only: no viewer identities, no per-visit records.
- Billing — Stripe customer and subscription ids. Card details go to Stripe and never reach us.
- Cookies — a session cookie and a note of which provider you last used to sign in. Nothing else.
How pipeout uses it
- To authenticate you and your agents, and to serve your artifacts.
- To enforce plan limits, rate limits, and abuse blocks.
- To bill you, if you are on Pro.
How data is shared
- Infrastructure: Cloudflare (hosting, edge, R2 storage), Convex (database), Stripe (payments), GitHub and Google (sign-in only).
- These providers operate in several countries, so data may be processed outside where you live.
- We never sell or rent your data.
Artifact URLs are share links, not access control. They are unguessable and unlisted, but anyone holding one can read the file and pass it on. Do not push secrets, credentials, or other people's personal data.
Retention
- Artifacts stay until you delete them; on the free plan only the five most recent versions of each are kept.
- Deleting an artifact removes its metadata and its stored blobs.
- Account data stays while the account exists.
Your controls
- Delete artifacts and revoke tokens yourself from the dashboard.
- You can ask us to confirm, correct, export, or delete what we hold about you; we honour those requests wherever you are, and aim to answer within 30 days of receiving them.
Changes
If this policy changes materially we will update the date above and tell account holders.
Contact
A contact address for pipeout is being set up and will be published here. Until it is, this page is the only channel we can point you at — check back, or ask through wherever you found pipeout.