Privacy — draft
Draft. This page is a plain-language draft written from what the system actually does today. It has not been reviewed by a lawyer, the contracting entity and governing law are not yet settled, and nothing is being sold. It will be replaced before any licence is offered for sale.
This page describes what the system does today, not what a policy template says. If something here is wrong, tell us and it gets fixed.
Your migrations never leave your runner
The analysis is a local process on your own machine or CI runner. Presift does not send — and the service has no way to receive — your SQL, schema, table names, file names, findings, repository content or results. There is no telemetry and no usage reporting of any kind.
This website
- No cookies are set by Presift, and there is no login, form, newsletter or comment box.
- Page views are counted with Cloudflare Web Analytics, Cloudflare's privacy-first analytics product: an aggregate count of page views and referrers. Cloudflare's own cookie reference lists no Web Analytics cookie.
- The site is hosted by Cloudflare, which processes ordinary request data (such as IP address) to serve and protect it, as any web host does.
The release service (api.presift.dev)
When Presift runs, the client sends: your key (or the evaluation entitlement it just obtained), the client version, the platform, and the requested channel or pinned version. To start an evaluation inside GitHub Actions it also sends the job's GitHub OIDC identity token — issued by GitHub, verified against GitHub's public keys, not stored.
The only record kept is one row per evaluating GitHub owner:
{ "owner_id": 123456789, "login": "your-org", "started": "2026-09-22", "exp": "2026-10-22" }- That is the whole record: GitHub's numeric owner id, the owner login, and two dates. No names, no e-mail addresses, no repository names, no personal profile data.
- It exists to enforce one evaluation per owner, which is why it is retained after the evaluation ends. Ask at hello@presift.dev and it will be deleted — deleting it makes that owner eligible to start a new evaluation.
- Downloads are not logged per customer, and there is no per-run record, so continued use is not tracked. Short-lived request counters used to limit abuse live in memory only.
Who else is involved
| Who | What they do |
|---|---|
| Cloudflare | hosts this site and the release service; stores the evaluation record and the signed release files |
| GitHub | hosts the client repository and, in Actions, issues the identity token that starts an evaluation |
No advertising networks, no third-party trackers, no data brokers, no session recording, no A/B tools.
Payments
None. There is no checkout, no payment processor and no card, billing or invoicing data anywhere in the system. When payments exist, this page will say exactly what the payment provider receives.
Questions, corrections, deletion
hello@presift.dev. The formal data-protection wording — roles, legal bases, international transfers, retention schedule — is part of the professional review this draft is waiting for; the facts above are accurate now.