Privacy, in plain English

Who is responsible

Nige Ltd, a UK company, is the data controller. Ask us anything at hello@spoz2.do.

What we collect, and why

• Your email address, to sign you in and reach you about your account.
• A handle and display name, for your workspace's public identity.
• Passkeys, if you add them. Only the public key. Biometrics never leave your device.
• What your CI sends: counts, digests and check outcomes, computed in your CI. We never access a private repo's IZ4 file or source code.
• Server logs, kept briefly to run and secure the service.

What we never do

• We do not sell your data, full stop.
• We never feed anything you send us to an AI model.
• We run no advertising, no trackers and no analytics. Two cookies, both for signing in.
• We never crawl private repositories. A public repo may be checked only to confirm its declared IZ4 is valid.

Who else touches data

• Postmark delivers sign-in emails.
• Amazon Web Services (Ireland) hosts the register, so data stays in the EU.
• Google Fonts serves the typefaces, for now.

Keeping and deleting

Account data lives as long as your account. Close it and we delete your personal data, keeping only what explains evidence you published. Unpublished reports go with the workspace.

Your rights

Under UK GDPR you can ask for a copy, a correction, a deletion, or to take your data elsewhere. Email hello@spoz2.do. You can also complain to the ICO at ico.org.uk, though we would rather fix it first.

Changes

Material changes are posted here with notice.