Privacy
Navegando works on your own machine without an account. This page covers Navegando Cloud, the paid sync service at navegando.dev. We keep as little as we can. No passwords, no card numbers, no ads, no tracking. You can download everything we have about you, or delete it, from your account page.
Who's responsible
Bruno Carvalho, Canada runs Navegando Cloud and is responsible for your data. Contact: bruno@poweredbycode.com.br.
Visiting
The homepage sets no cookies. Like any website, our hosting sees your IP address with each request. It's kept in server logs for up to 30 days to keep the service running and stop abuse. To limit floods we count requests per address for one minute, in memory only.
With an account
| What | Why | How long |
|---|---|---|
| Your account: the id GitHub or Google gives us, your email address and your name | To know it's you, show who's signed in, and reach you about your account or payments. Never shown to others, never shared | Until you delete your account |
| Browser sessions and CLI sign-ins (stored only as hashes) | To keep you signed in on the site and in navegando on each machine | 30 days for a browser, 90 days for a CLI, or until you sign out |
| Sign-in codes for the CLI | To connect a terminal to your account | 10 minutes, then deleted automatically |
| The files of the projects you sync (tickets, stories, docs, settings) | That's the service: keeping them on all your machines | Until you delete the cloud copy or your account |
| Your plan, and your Stripe customer and subscription ids | To know whether cloud sync is paid for, and to open Stripe's billing page for you | Until you delete your account |
One cookie, __session | Keeps you signed in on the site. Strictly necessary, so there's no banner | 30 days, or until you sign out |
The legal basis is the service you asked for (your account, sync and payments) and our legitimate interest in keeping the service safe (logs and rate limits).
Who else handles it
- Google Cloud / Firebase (United States): hosting, database and sign-in.
- GitHub or Google: whichever you sign in with confirms who you are.
- Stripe: takes payments. Your card details go to Stripe, never to us. Stripe keeps its own payment records as the law requires.
- Resend (United States): will send emails about your account, once we send any.
Transfers to the United States rely on the providers' standard contractual clauses. We don't sell or share your data with anyone else.
Your rights
You can see, download, correct and delete your data. Download and delete are on your account page. Deleting a cloud copy removes that project's files from our servers. Deleting your account removes your account, its cloud copies, your plan and every CLI sign-in at once. Files on your own machines are never touched. Backups age out within 14 days. You can also object to how we use your data, or complain to your data protection authority. For anything else, write to bruno@poweredbycode.com.br.