Privacy Policy

Last updated: 2026-01-02

This policy covers the Pipedash app and this website.

Pipedash app

Pipedash does not collect, store or transmit personal data to external servers. Provider credentials, pipeline configuration and preferences stay on your device, or in the database you configure for a server deployment.

Pipedash connects to the CI/CD providers you add (GitHub, GitLab, Bitbucket, Buildkite, Jenkins, Tekton and ArgoCD) with the credentials you provide. These connections go directly from your device to those services. Pipedash does not proxy, intercept or store data from these connections anywhere else.

Pipedash includes no analytics, tracking or telemetry software.

On desktop, tokens go to the system keyring by default (macOS Keychain, Windows Credential Manager or Linux Secret Service). Encrypted SQLite and PostgreSQL token storage use AES-256-GCM with an Argon2id-derived key. See token storage.

Website

When analytics are enabled, this site counts page views, clicks (for example, download buttons) and page load timings with Umami, a self-hosted tool at analytics.cavarsa.app. Umami does not use cookies. The site sends the page URL, including campaign parameters in the query string, but not URL fragments.

The site shows no ads and does not sell or share visitor data.

Changes

Changes to this policy appear in the repository and on this page.

Contact

Questions about this policy go to GitHub issues.