§legal/privacy·updated May 2026
privacy.
StackPulse is a non-profit, open-source service that helps developers track GitHub release notes for the libraries they use. We try to collect as little as possible. This page explains what we collect, why, and what your rights are.
What we collect
- GitHub profile basics when you sign in: your numeric GitHub user ID, email address, display name, and avatar URL. Authentication is handled by Better Auth.
- Your stack selection: the list of technologies and GitHub repository URLs you choose to follow.
- Session cookies needed to keep you signed in.
- Server logsgenerated by our hosting provider (Vercel) — IP address, user agent, request path, response status. These are retained on Vercel's schedule.
What we don't collect
- No third-party trackers or advertising pixels.
- No behavioural analytics that profile individuals.
- No access to your private GitHub repos. The OAuth scope is your public profile only.
How we use it
- To show you a personalised feed of releases.
- To send your selected repos through GitHub's public release API every 4 hours.
- To summarise release notes using OpenRouter (model details are public).
- To respond to support requests you send us.
Where it lives
Account data and release summaries are stored in Postgres on Neon (neon.tech), inside the EU/US region you signed up from. The app is hosted on Vercel. We do not sell or share your data with third parties.
Your rights
- Access: sign in and you can see your full stack and feed.
- Deletion:sign in, open the user menu, click "delete account". This wipes your account, stack, and read history immediately and cannot be undone.
- Questions: open an issue at github.com/daniel-ctn/stack-pulse.
Changes
If this policy ever changes meaningfully, we'll update the date at the top and post a note in the repo's release notes — since you'll already be watching for those.