Privacy policy
1. Who we are
The controller is [Company legal name], [Address], [Contact e-mail]. This policy covers myrtille.eu and its documentation, the demo town, the telemetry collector and Myrtille Cloud. A self-hosted Myrtille sends us nothing, except the telemetry report if you say yes to it.
2. What Myrtille never does
- It never stores your secrets in the cloud: no environment value, password or key of your applications, even encrypted.
- It never writes the content of your logs: they pass through the relay and are not kept.
- It never stores coding agent transcripts or Anthropic credentials.
- It never sells data, shows no advertising, and puts no tracking or analytics on this site.
3. This website
No cookie, no analytics, no third-party script. The web server may write a technical line per request (time, page, status, browser type) to run and secure the site, kept at most [Web server log retention]. The site is hosted by Hetzner in the European Union.
4. Telemetry of self-hosted instances
Off unless you say yes at installation, and you can turn it off at any time. One report a day holds only counts and closed lists: a random instance identifier linked to nobody, the version, the system, and the number of districts, buildings, citizens, adapters, mail items and actions. Never a name, a URL, content or a user identifier. The collector keeps no IP address. The exact list of fields is on the telemetry page of the documentation, and the town shows you the report before sending it. Reports are kept 90 days, then deleted automatically.
5. The cloud interest form
If you send it, we keep your e-mail address, your team size, what you would pay, your comment if you write one, the language and the time, to write to you about Myrtille Cloud. Nothing else, never shared. You consent by ticking the box. You withdraw at any time with the button of the thanks page, whose address holds a key only you have (keep it as a bookmark), or by writing to [Contact e-mail]: your answer is then deleted. Kept at most 12 months after your answer, then deleted automatically.
6. Myrtille Cloud
Your organisation is the controller of the data of its town, and we are its processor under the data processing agreement. We are the controller only for your account and your billing.
- Accounts: e-mail, display name, password hash or the identity of your sign-in provider, sessions, API keys (as hashes), roles and invitations.
- The town: its plan, the states of its citizens, its events (metadata, never log content), its mail and decisions, its actions and its audit log.
- Agents and devices: enrolled agents, and the push subscription of each device where you turn notifications on.
- The tokens you give, encrypted with the key of your organisation.
- Billing: the Stripe customer identifier, plan, seats and status. Card details stay at Stripe.
- Cookies of the town, all needed for the service: myrtille_session (your session, at most 30 days), myrtille_device (protects your account against password guessing, 90 days) and myrtille_oidc (10 minutes, during a single sign-on).
7. Where and for how long
- Hosting in the European Union (Hetzner, Germany or Finland), database and encrypted backups included. Each organisation is isolated in the database by row level security.
- History kept 7 days on Solo, 90 days on Team, 1 year on Business, then deleted automatically.
- When an organisation leaves, its data is deleted within 30 days, and leaves the encrypted backups as they rotate.
8. Who receives data
Only our staff who run the service and our subprocessors: Hetzner (hosting, EU), a transactional e-mail provider (EU) and Stripe (payment), which may transfer data to the United States under the EU standard contractual clauses. Push notifications go through the push service your browser chose (Google, Mozilla, Apple or Microsoft), encrypted end to end so that service cannot read them. Nothing is sold.
9. Your rights
You may ask for access, rectification, erasure, restriction, portability, and object to a processing; you may withdraw a consent at any time. Write to [Contact e-mail]; we answer within one month. For the data of a cloud town, we pass your request to your organisation and help it answer. You may also complain to the data protection authority of your country.
10. Changes
A change is published here with its date; a substantial change is announced to cloud customers by e-mail before it applies.