Privacy Policy

Last updated 6 September 2026

This policy describes how the operator of RunCloud9 ("we", "us", "our") handles information when you use the service at www.runcloud9.io. The operator is the data controller for personal information described here.

What we collect

• Account data: email address, authentication identifiers, and profile information from Supabase, including Google or GitHub sign-in when you use those providers.
• Session data: deployment designs, namespace metadata, session duration, and summarized metrics stored with your account.
• Device and log data: IP address, browser type, and basic request metadata needed to secure and operate the service.
• Usage analytics: product events (for example canvas opened, deploy requested) via PostHog, with coarse error categories, not raw backend error text.
• Diagnostics: client errors and performance signals via Sentry when enabled.
• Support messages: information you send when you contact us (for example through Discord), including your account email when you provide it for verification.

How we use it

We use personal information to provide and secure the service, provision lab sessions, enforce quotas, authenticate users, respond to support requests, improve reliability and UX, and comply with law. We do not sell your personal information.

Legal bases

Where required by law, we rely on: performance of our contract with you (providing the service); legitimate interests (security, abuse prevention, product improvement); compliance with legal obligations; and your consent where we ask for it explicitly (for example optional analytics where applicable).

Processors and sharing

We use service providers that process data on our instructions:

• Supabase: authentication and application data.
• Google Cloud: Kubernetes workloads for lab sessions.
• PostHog: product analytics.
• Sentry: error monitoring when enabled.

International transfers

We and our processors may store or process information in countries other than yours, including the United States. We use providers that maintain appropriate safeguards for cross-border transfers as required by their terms and applicable law.

Retention

Live cluster resources are torn down when sessions end. Account and deployment history are kept to operate dashboards and respond to support requests, typically until you delete your account or until we remove inactive accounts after at least twelve months of no sign-in, with notice when practical.

Analytics and error data follow each provider's retention settings. We may retain limited records longer where required for security, fraud prevention, abuse prevention, or legal obligations.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us through the Discord link in the website footer and include your RunCloud9 account email. We may need to verify your identity before fulfilling a request.

If you are not satisfied with our response, you may have the right to complain to a data protection authority in your country.

Cookies and analytics

We use essential cookies and similar technologies for sign-in and security. Analytics cookies and similar technologies (PostHog) are used only if you accept analytics in the cookie banner or choose Cookie settings in the website footer. See our Cookie Policy at /cookies for details.

Children

RunCloud9 is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided us information, contact us and we will delete it.

Security

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure. Report suspected security issues through the Discord contact method in the footer.

Changes

We may update this policy. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated by email or in-product notice where appropriate. If we later offer paid plans, we may collect payment-related information through a payment processor and will update this policy before doing so.

Contact

Data controller: the operator of RunCloud9. For privacy requests or account deletion, contact us through the Discord server linked in the website footer. Include your RunCloud9 account email so we can verify your request.