Last Updated: January 25, 2026

This Privacy Policy explains how EventCatalogEditor ("we," "us," or "our") collects, uses, stores, and protects your information when you use the EventCatalogEditor web application (the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy.

1. Information We Collect

1.1 Information from GitHub

When you authenticate using GitHub OAuth, we may receive:

• GitHub user ID
• GitHub username/login
• Public profile information (such as avatar URL)
• Repository names and metadata you explicitly choose to access

We do not receive your GitHub password.

1.2 Information You Provide

When you use the Service, we may collect:

• Display name
• Email address (optional, if you provide it)
• User preferences
• Recently opened project metadata (repository owner, name, branch, timestamps)

1.3 Technical Data

We may collect limited technical information:

• IP address
• Browser type
• Session identifiers
• Error logs
• Access timestamps

This data is used only for security, diagnostics, and improving the Service.

2. What We Do NOT Store

We do not store:

• Your GitHub access tokens in the database
• Your GitHub passwords
• Your repository contents
• Your documentation files
• Any secret credentials from your repositories

All file operations are performed in real time using GitHub APIs.

3. How We Use Your Information

We use your information to:

• Authenticate you
• Display your profile
• Remember your preferences
• Show your recent projects
• Enable repository access
• Improve application stability
• Respond to support requests

We do not sell, rent, or trade your personal data.

4. Data Storage

Your user profile, preferences, and recent projects are stored in a secure MongoDB database. We implement reasonable technical and organizational safeguards, but no system is 100% secure.

5. Third-Party Services

We rely on third-party services including:

• GitHub
• Hosting providers
• Authentication systems

Your data may transit through these systems under their own privacy policies. We are not responsible for their practices.

6. Data Retention

We retain your data only as long as your account exists or as required to provide the Service. You may request deletion of your data at any time by contacting us.

7. Cookies & Sessions

We may use cookies or session storage to:

• Maintain login state
• Protect against CSRF
• Improve user experience

These cookies are not used for advertising or tracking across sites.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your data
• Correct your data
• Request deletion
• Withdraw consent

Contact us to exercise these rights.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect data from minors.

10. Policy Updates

We may update this policy at any time. Continued use of the Service means you accept the updated version.

11. Contact

For privacy-related questions or requests:

EventCatalogEditor

[Your contact email or support link]