Privacy Policy

Last updated: January 18, 2026

1. Information We Collect

Account Information

Username and email address
Password (encrypted with bcrypt)
OAuth provider information (if using GitHub/Google login)

Content

Scripts you create and upload
Public keys you generate or import
Script metadata (names, descriptions, visibility settings)

Usage Data

Access logs (IP addresses, timestamps)
Script retrieval statistics

2. How We Use Your Information

To provide and maintain the service
To authenticate your account
To store and serve your scripts
To enforce rate limits and prevent abuse

3. Data Storage

Account data is stored in our database
Scripts are stored in S3-compatible storage or local filesystem
Private keys are NEVER stored on our servers
All data is encrypted in transit (HTTPS)

4. Cookies

We use only essential cookies to store your authentication token in your browser's local storage. We do not use tracking or analytics cookies.

5. Third-Party Services

OAuth Providers: If you use GitHub or Google login, their privacy policies apply
Storage: Scripts may be stored on third-party S3-compatible services

6. Your Rights (GDPR)

Under GDPR, you have the right to:

Access: Export all your data from Account Settings
Rectification: Update your account information
Erasure: Delete your account and all associated data
Portability: Download your data in JSON format
Object: Contact us to object to data processing

7. Data Retention

Active accounts: Data retained indefinitely
Deleted accounts: All data permanently deleted within 30 days
Access logs: Retained for 90 days

8. Security

Passwords encrypted with bcrypt
JWT tokens for authentication
HTTPS encryption for all traffic
Private scripts can be encrypted with ChaCha20-Poly1305

9. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by updating the "Last updated" date.

11. Contact Us

For privacy-related questions or to exercise your GDPR rights, contact us at: privacy@shebang.run

We use essential cookies to store your authentication token locally in your browser. No tracking or analytics cookies are used. By continuing, you accept our Privacy Policy and Terms of Service.