What we store

Questions or requests about your data: admin@cheatcodehq.com.

If you create an account

We store your email address. If you sign in with GitHub, we also store your GitHub user id, username, display name and avatar link. We never receive your GitHub password, and we only ask GitHub for permission to read your profile and email addresses.

If you sign in with Google, we store your Google account id, name, profile picture link and verified email address. We only ask Google for your basic profile and email (the openid, email and profile scopes), and never receive your Google password.

When you sign in, we store a session record: a hash of the random value in your session cookie, when it expires, and your browser's user agent string. Email sign-in links are stored as hashes with the requesting IP address, for rate limiting, and deleted after a day.

If you upload a profile picture, we keep a 256 pixel square copy of it, made again from the pixels without the original file's metadata (such as location or camera). Only your own signed in session can load it; it is deleted when you remove it or delete your account. If you connect a second sign-in method (GitHub or Google) from your account page, we store its account id as described above.

If you answer the welcome questions

After your first sign-in we ask what you do and which roles you want tools suggested for. Both are optional, and “Prefer not to say” or skipping stores nothing. If you answer, we store your answers with your account and use them only to suggest toolkits to you. They are never shown to other people and never affect the ladder. You can change or clear them on your account page, and deleting your account deletes them.

If you send feedback

When you write a note on the Feedback page, we store what you wrote, the kind of note, the page or listing you came from and your browser's user agent string. If you are signed in, the note is linked to your account so you can see our answer; if not, we store the email address you give, only if you give one, to answer you. Notes are read by the people running Cheatcode, never shown to other people and never used to rank anything. Deleting your account deletes your notes.

If you install or run a package

The installer reports which package was installed into which client, with a random install id, so the ladder can count installs and uninstalls. It does not send your files, your prompts or anything the skill produces.

If you connect the Mac app to your account, the app also saves your signed-in installation history with your account: the listing, AI app, user or project scope, version, status and sync time. It does not send your local folder paths or project names. History that could not be sent is kept on your Mac and retried when the same account reconnects. The app keeps its sign-in credential in macOS Keychain. Deleting your account removes the history stored with it.

What we do not do

We do not sell data, show ads or use third party trackers. The only cookie is the session cookie, plus a short lived one during GitHub sign-in.

Where it lives

Data is stored in a Postgres database hosted by Supabase in the United States, and served from a server in Oregon, United States. Sign-in emails are sent through Google Workspace.

Your choices

You can delete your account at any time from the account page. That removes your user record, sessions and pending sign-in links immediately. For anything else, email us.