Lightfactory is in a closed beta with a waitlist. This notice says what it keeps about you when you sign in, and why.

Who is responsible

Benedict Evert runs Lightfactory and is the controller of your data. Write to benedict.bleimschein [at] gmail [dot] com, or reach him on LinkedIn or X.

What is kept

  • Waitlist. Signing in with GitHub before you are admitted keeps your numeric GitHub ID, your login and when you joined. Nothing else is kept until you are admitted.
  • Account. Once admitted, your GitHub ID and login, your sessions, your teams, their members and invitations, the GitHub installations and repositories you connect, your review settings, and a log of changes to them.
  • Reviews. For repositories you opt in: the pull requests reviewed, the reports posted on them and the review's usage. Lightfactory reviews only its owner's repositories during the beta; this notice changes before it reviews yours.
  • Logs. The service logs sign-ins with the GitHub ID. It does not log IP addresses.
  • Cookies. One cookie keeps you signed in, and one lasts through a sign-in with GitHub. There are no analytics or tracking cookies.

Why

To run the beta you sign up for (Art. 6(1)(b) GDPR), and to keep it secure and recoverable (Art. 6(1)(f) GDPR).

Where

  • The database runs on Hetzner in Helsinki, Finland.
  • Encrypted backups go to OVHcloud in Gravelines, France.
  • Reviews run on OVHcloud in Beauharnois, Canada, which reads your teams' repository settings; Canada has an EU adequacy decision.
  • GitHub handles sign-in under its own privacy statement.

How long

  • Waitlist entries are deleted if you are not admitted within 12 months.
  • Sessions end after 24 hours idle and at most 14 days; invitations expire after 7 days.
  • Account data stays until you ask for it to be deleted.
  • Backups are kept for 14 days.

Your rights

You can ask for a copy of your data, its correction or deletion, its restriction, or object to its use, and take it elsewhere. Write to the address above. You can also complain to a supervisory authority, such as the one where you live.