Patch Together is run by Dustin Lacewell, an individual (“we”, “us”). This policy covers the website, the account service, and the plugin. We do not sell your data. We do not use ads or analytics.
What we store about your account
- Email address. Used to verify your account, reset your password, and send account email such as beta admission.
- Nickname. Shown to other people in sessions.
- Password. Stored only as a one-way hash. We cannot read it.
- Account status. Whether your email is verified, your beta status, your plan, and when a paid plan runs until.
- Login tokens. Short records that keep you logged in to the plugin.
- Sync policy suggestions. If you send module sync suggestions from the plugin, we keep them with your account.
If you never verify your email, we delete the account after 24 hours.
What we record when you use sessions
- Session events. When a session starts or ends and when someone joins, leaves, or is removed. Each record holds a timestamp, a session code, and an account number. We use them to count usage and find bugs.
- Server logs. The servers log errors and activity. Log lines can include your IP address (for example, when you hit a rate limit or connect to the connection server), your email address (when a signup fails), your nickname, and session names. The operating system rotates these logs. We do not archive them.
Sessions themselves do not pass through our servers. Our connection server helps your computer reach the host. To do that it sees your public IP address and your local network address. After that, your computer connects directly to the host’s computer. The host and other participants can see your IP address. Your patch goes to them, not to us.
What the website does
- The site sets no cookies and runs no tracking scripts.
- When you log in on the site, your login is kept in your browser’s session storage and is gone when you close the tab. The site also remembers whether the beta is open or closed in your browser.
- The site loads fonts from Google Fonts. Google receives your IP address when it serves them.
What stays on your computer
- The plugin keeps your login in a file in your Rack folder so you stay logged in.
- The plugin can write performance logs to a
pt-statsfolder, but only if you create that folder yourself. These files never leave your computer unless you send them to us.
Who else handles your data
- Amazon Web Services hosts our server and database in the United States.
- Resend sends our email. It receives your email address and the message.
- Stripe handles payments. Paid plans are not on sale during the beta. If you buy a plan, Stripe receives your email address and your payment details. We never see your card number. We store only your Stripe customer number.
How long we keep it
We keep your account data until you delete your account. Deleting your account removes your account record, email, nickname, password hash, login tokens, and sync policy suggestions, and cancels any subscription. Session event records stay, but the account number in them no longer links to anyone. Stripe keeps its own payment records as the law requires.
Your choices
- Delete your account from the account page, or email us.
- Get a copy of your data, or correct it: email us.
- If you are in the EU or UK, you also have the right to object to or restrict how we use your data, and to complain to your local data protection authority. We use your data to provide the service you signed up for.
Email: dlacewell@gmail.com.
Children
Patch Together is not meant for children under 13. We do not knowingly collect data from them. If you think a child has an account, email us and we will delete it.
Changes
If this policy changes in a way that matters, we will email account holders before it takes effect. The date at the top shows the last change.