Privacy

You can use Sasca without an account. If you sign in, we store a little about you, listed below, and nothing else.

Who is responsible

Sasca is run by Marc-Alexandre Montpas, in Finland, who decides what is stored and why (the “controller” under the EU’s General Data Protection Regulation). Questions and requests: marc@montpas.me.

What we store

• Without an account: nothing about you. Like any web server, ours logs requests (IP address, page, browser) to keep the site running and secure.
• With an account: your name, email address and avatar as GitHub or GitLab share them; your GitHub or GitLab user ID and username; when you signed up and last signed in.
• For each signed-in browser: its browser name (user agent), when it signed in and was last used, and a hash of its session token.

We don’t store GitHub or GitLab passwords or access tokens: we use them once, to read your profile. There are no analytics or tracking. The only cookie is sasca_session, set when you sign in, which keeps you signed in (plus sasca_oauth for the minute a sign-in takes).

Why

To give you your account and keep it secure (GDPR article 6(1)(b), providing the service you sign up for), and server logs to run the site safely (article 6(1)(f), legitimate interest).

How long

Your account data until you delete your account. A browser’s session ends after 30 days without use, or when you sign it out.

Who else processes it

• Hetzner Online GmbH hosts our servers, in Finland, under a data processing agreement.
• GitHub or GitLab, when you choose to sign in with them, under their own privacy policies.

Your rights

You can download everything we store about you and delete your account from your account page. You can also ask us to correct, restrict or explain what we store, or object to it, at marc@montpas.me. If you think we handle your data wrongly, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).