Privacy policy
This policy says what personal data Packrat Labs ("Packrat", "we") collects, why, and what you can do about it. It covers packrat.sh, its subdomains and the Packrat service.
Last updated October 13, 2026.
Two kinds of data
Account data is about you, the person with a Packrat account. We decide what is collected and why.
Telemetry data is what your apps send to Packrat. It is yours. We process it only to provide the service to you, and what it contains is your decision. The rest of this policy is mostly about account data; the GDPR page covers telemetry in more detail.
What we collect
When you sign in. Your email address, your name if GitHub gives us one, and your GitHub account id if you sign in with GitHub. We do not receive or store a password.
When you use the app. A session cookie, the IP address and browser of each session, and when each API key was last used.
On the signed-in pages. JavaScript errors, page load timings and, for some sessions, a recording of the page, so that we can find and fix problems. These go to Packrat's own systems and to no other company. Keys shown on a page are blocked from recordings.
When you write to us. Whatever you send.
If you connect a repository. The commits, diffs and pull request text Packrat's agent reads from the repositories you picked.
What we do not do
- We do not sell personal data.
- We do not run advertising or third-party analytics trackers on any page.
- We do not use your telemetry to train models, and we do not look at it except to provide and support the service.
Cookies and local storage
Packrat sets one cookie, which keeps you signed in. Your light or dark theme choice is kept in your browser's local storage. There are no advertising or tracking cookies.
Pages load their typefaces from Google Fonts, so Google receives your IP address when a page loads.
Why we use it
- To provide the service: sign you in, show you your orgs, answer your queries.
- To send you the mail the service exists to send: sign-in codes, reports from Packrat's agent and new-issue mail.
- To keep the service secure and working: rate limits, abuse prevention, debugging.
- To answer you when you write.
Who else receives it
We share data only with the companies that help us run Packrat, each for the purpose named on the list of sub-processors, and when the law requires it. If Packrat is ever acquired, account data moves with the service and this policy continues to apply to it.
How long we keep it
- Account data: while you have an account. Sessions that are no longer used are deleted.
- Sign-in codes: deleted shortly after they expire.
- Telemetry: 12 months for active customers, or until you delete your organization or application.
Your choices
You can ask us for a copy of your account data, to correct it, or to delete your account and your org's data. Write to [email protected] from the address on the account. We answer within 30 days.
Children
Packrat is a tool for software teams and is not meant for anyone under 16.
Changes
When this policy changes in a way that matters, we change the date above and tell account holders by email.
Contact
Packrat Labs, [email protected].