Privacy Policy
Last updated 26 October 2026
This policy explains what SheepKit collects, why, and what you can do about it. We collect as little as we need to run the service and don't sell or share your data for advertising.
What we collect
- Account: your name, email address, a hashed password (or your Google account id if you sign in with Google), and an optional avatar image.
- Content: the teams, projects, releases, tickets, comments and files you and your teammates add.
- Security data: for each signed-in session, the IP address and browser user agent, and short-lived rate-limit counters, used to keep accounts safe and stop abuse.
- Cookies: only what's needed to keep you signed in, remember your last team and project, and which sign-in method you used last. No analytics or advertising cookies.
- Usage statistics: we may use cookieless analytics to count page visits and see which features are used. It doesn't set cookies or track you across other sites, and we only look at the totals.
Why (legal basis)
To provide the service you signed up for (contract), to keep it secure and prevent abuse, and to understand how it's used so we can improve it (legitimate interests).
Who processes it
- Cloudflare: hosting, database and bot protection (Turnstile).
- Plunk: sending emails such as team invitations, email-verification links and password-reset links.
- Google: only if you choose to sign in with Google.
- An analytics provider: cookieless usage statistics, if we use them.
These providers may process data outside your country, under their own safeguards.
Who can see your content
Members of the teams you belong to can see that team's content and your name, email and avatar. Team owners manage membership.
How long we keep it
Until you delete it or your account. Deleting your account removes your profile and sessions; content you added to a team stays with that team unless the team deletes it. Data may also be lost earlier, as there are no backup guarantees (see the Terms).
Your rights
You can view and change your details and delete your account in account settings. You can also ask us for a copy of your data, a correction, or deletion, and you may complain to your data protection authority.