Privacy Policy

Effective date: May 13, 2026

What We Collect

We collect the following information:

• email address
• username
• session tokens (via postern_token cookie)
• SSH public keys
• repository names and contents
• IP addresses in server logs

Why We Collect It

We collect this information to:

• authenticate you via Bastionary
• serve your repositories
• maintain security logs

Third Parties

We use Bastionary to validate your authentication token on each login. We do not use any third-party analytics, advertising, or tracking pixels.

Data Retention

We retain the following data for the following periods:

• session tokens: 30 days
• SSH keys: until you delete them
• repositories: until you delete them
• server logs: 90 days

Your Rights

You have the following rights:

• delete your account by contacting security@bastionary.com
• export your repositories via git clone
• delete SSH keys in /settings/keys

Contact

If you have any questions or concerns about this privacy policy, please contact security@bastionary.com.