Privacy policy

Caspian Tools is operated by the maintainers of the caspiantools repository. The website at caspiantools.com is the data controller for the personal data described on this page.

Contact: privacy@caspiantools.com.

When you sign in:

• Your email address, display name, and avatar URL, as provided by your sign-in provider (Google, GitHub, or email-and-password).
• A Firebase user ID assigned to your account.

When you use the product:

• The tasks, notes, sprints, milestones, projects, and comments you create.
• Attachments you upload to tasks.
• Workspace and project membership records.
• Per-event in-app notifications addressed to your account.

We do not collect:

• Browser, device, or IP-based analytics (no Google Analytics, Mixpanel, PostHog, Segment, Heap, Amplitude, or session-replay tools).
• Behavioural tracking across other sites.
• Advertising identifiers.

All data is stored in Firebase services (Firestore, Auth, Storage, Cloud Functions), hosted by Google Cloud in region europe-west4 (Eemshaven, Netherlands). Cloud Functions execute in the United States us-central1 region as a deployment constraint, but they do not persist data outside Firestore.

Google Cloud is the only third-party data processor. We do not share data with anyone else for any purpose.

If you connect a GitHub account to push tasks to GitHub Issues, your GitHub OAuth token is issued by Firebase Auth's GitHub provider and held in browser memory during your session only. It is never persisted to our database or any server-side store. Closing the tab discards it.

We never receive or process the contents of any private GitHub repository beyond the specific issues that the product opens, edits, or closes on your behalf.

We use two kinds of cookies. Both are functional, not advertising.

• A session HTTP-only cookie that holds your Firebase session, set when you sign in and cleared when you sign out.
• Firebase Auth's own client-side storage (cookies and IndexedDB) used by the Firebase SDK to keep you signed in across tabs.

No analytics, tracking, or advertising cookies are set.

We send transactional email only — currently invite emails, when a workspace owner adds you. We use the Firebase Trigger Email extension; the underlying SMTP provider sees the recipient address and message body. We do not send marketing email.

You have the right to access, export, and delete your data. To exercise any of these, email privacy@caspiantools.com from the address on your account. We aim to respond within 14 days.

Account deletion removes your authentication record, your user profile document, and your membership in every workspace and project. Workspaces you solely own are deleted with all their contents. Workspaces you share with other members remain; your individual edits become attributed to your deleted-user record.

Caspian Tools is not directed at children. If you are under 16, please do not create an account. If you believe a child has signed up, email us and we will delete the account.

We log changes to this page in the repository's commit history and call them out in the changelog. The Last updated date at the top reflects the most recent change.