Privacy policy
Last updated 2026-10-22
fitlocale cloud is run by Bilel Saidi, Canada ("we"), who is responsible for the personal information it keeps. This page says what the hosted service keeps. The open-source fitlocale package sends nothing anywhere unless you turn on upload.
What we keep
| What | Why | How long |
|---|---|---|
| Your GitHub account or organization (id, login, type), and the ids and names of the repositories the App is installed on | To know which repositories belong to which plan | Until you uninstall the App and ask us to delete it |
Uploaded reports: results.json, with each issue's text, selector and page address, and the screenshots and crops | To post the pull request comment and show the hosted report | 30 days on Team and during the trial, 90 days on Business |
| For each run: the commit, branch, pull request number and GitHub run id | To comment on the right pull request | Deleted with the run's report |
| When you sign in: your GitHub user id and login, and your GitHub sign-in token, encrypted | To check that you can see a repository before showing its report | 7 days, or until you sign out |
| The answers to repository access checks for your sign-in (which repositories and accounts you could see or manage) | So GitHub isn't asked again on every page | Checked again after 10 minutes; deleted with the sign-in |
| Your plan: the Paddle customer and subscription ids, and the subscription's status and dates | To give you the plan you paid for | While the account exists |
Legal basis: we use this information to provide the service you signed up for (the contract), and with your consent when you install the App, sign in or upload. We don't use it for anything else.
We keep no payment card or bank details. Paddle, our reseller and merchant of record, handles payment under its own privacy policy.
Who can see it
- Hosted reports are shown only to signed-in GitHub users who can see the repository.
- Crop images in pull request comments are served from unguessable public links, because GitHub loads comment images without signing in. The links work until the report expires. You can turn them off on your account page, and fitlocale's
maskoption paints over customer data before anything is uploaded. - Service providers: the service runs on Cloudflare (Workers, D1 and R2 storage). GitHub and Paddle receive what their part of the service needs. We sell nothing to anyone, and use no analytics or advertising trackers.
- Others: we disclose information to authorities only when the law requires it, and to professional advisers under confidentiality when needed to run the business.
- Where: Cloudflare stores and serves data on its global network, so it may be processed outside Canada. It does so under its data processing terms, which include the standard contractual clauses for transfers from the EU and UK.
- Security: all traffic is encrypted in transit (HTTPS), stored data is encrypted at rest by Cloudflare, sign-in tokens are additionally encrypted by us, and reports open only to people GitHub says can see the repository.
Cookies
There is one sign-in cookie, fl_session, and a short-lived fl_state cookie during sign-in. Both are needed for the service to work.
The checkout on your account page is Paddle's (Paddle.js), which sets its own cookies under Paddle's privacy policy.
Your rights
To get a copy of your data, or to have it corrected or deleted, write to melliforge@gmail.com. We answer within 30 days. Uninstalling the GitHub App stops new uploads, and stored reports expire on their own. You can also complain to your data protection authority. In Canada, that is the Office of the Privacy Commissioner of Canada.