Privacy policy
Last updated October 16, 2026
Jotpod is built to keep as little about you as it can. This page explains what we collect when you use Jotpod, why, how long we keep it, and the choices you have.
What we collect
- GitHub sign-in: your GitHub user ID, username, display name and avatar URL. We don't request your email address and never see your GitHub password.
- Email sign-up: your username, email address and a hashed (never plain-text) password.
- Your content: messages, reactions, thread replies, and images you upload or set as your profile photo.
- Repository information: for repositories where the Jotpod GitHub App is installed, their name, owner and visibility, issue numbers and titles for linked pods, and whether you're a collaborator.
- Technical data: your IP address is used briefly for rate limiting and security, and our hosting providers keep standard server logs.
How we use it
- To sign you in and show your name and avatar to other participants.
- To check with GitHub that you're allowed into a repository pod.
- To deliver messages and notifications inside Jotpod.
- To prevent abuse and keep the service secure.
We don't sell your data, show ads, or build advertising profiles.
Your GitHub access token
When you sign in with GitHub, GitHub gives Jotpod a token so it can list repositories you have access to. It's encrypted on our servers, never sent to your browser or shown to other participants, and used only for that purpose. You can revoke it at any time in GitHub under Settings → Applications → Authorized GitHub Apps.
Who can see your messages
- Repository pods: participants who are verified collaborators on the linked repository.
- Quick pods: members of the pod, and anyone with the link if the owner makes it public.
How long we keep it
- Quick pods and their messages are deleted automatically when they expire (24 hours to 6 days).
- Repository pods are kept until their owner deletes them. They become read-only when the linked issue closes.
- You can delete your own messages at any time.
- Deleting your account removes your profile, the pods you created, the messages you sent and your stored GitHub token.
- Short-lived sign-in records are kept for minutes; webhook delivery records for 14 days.
Cookies and local storage
Jotpod doesn't use advertising or analytics cookies. It uses a short-lived cookie to protect GitHub sign-in, and your browser's local storage to keep you signed in and remember preferences like your theme.
Analytics
We use Vercel Web Analytics to count page views, so we know which pages are used. It sets no cookies and doesn't identify you or follow you across sites. It sees the page address (with pod codes and sign-in codes removed), the referring site, and your browser, device type and country. It never sees your messages.
Services we rely on
We use GitHub (sign-in and repository access), a database host to store data, an image host for uploads, hosting providers to run the website and API, and Vercel Web Analytics to count page views. They process data on our behalf only as needed to provide those services.
Your choices
- Delete messages, leave rooms, or delete your account from Account settings.
- Revoke Jotpod's access to your GitHub account from your GitHub settings.
- Ask us for a copy of your data or to correct it by contacting us below.
Changes and contact
If we change this policy we'll update the date at the top. Questions or requests: singh20x7@gmail.com.