Privacy Policy

This public information site loads no analytics scripts. The application policy below describes MyDocker product accounts and previews.

Version: 20 October 2026. Magic Crystal Limited operates MyDocker and is responsible for the personal data described here. Contact support@mydocker.com for privacy questions or requests.

Account and GitHub information

We use your verified GitHub provider ID, public profile and account/session records to sign you in, enforce repository access and funding rules, and issue the one-time welcome credit. GitHub provides the identity and repository information used in that process. Required identity and authorization data is necessary to provide an account; analytics consent is optional and does not affect access.

Repositories, sandboxes and results

When you request a preview, we process the selected repository and pull request references, commit and build inputs, configuration, runtime and usage records, invitations and maintainer results. The first release does not retain reporter notes, screenshots or selected logs. Where separately enabled, optional evidence can include logs or screenshots within the selected policy and retention period. Other authorized participants can see the results and evidence you share with them. Avoid submitting production secrets or sensitive personal data, even when the repository itself is public.

Contributor test steps, expected behavior and synthetic-data instructions are preparation metadata shared with the invited reporter and currently authorized maintainers. They are separate from optional reporter evidence and its retention deadline. Keep credentials and personal data out of these fields. We also retain daily counts of preflight rejection requests by fixed reason, without repository, participant, invitation or task content. These request counts can include retries and do not identify unique people.

Billing, support and service protection

We keep credit grants, checkout references, payment and refund facts, reservations and usage records to account for funds and resolve disputes. Stripe processes payment details; MyDocker does not ask you to submit card details to our support team. Support correspondence, request/security metadata and operational records help us investigate errors, protect accounts, prevent abuse and reconcile deletion.

Service providers and disclosures

GitHub supports identity and repository access; Cloudflare supplies application hosting, storage and service protection; Modal supplies preview/build/browser infrastructure; AWS supplies key-management infrastructure; and Stripe processes payments. Google Analytics is used only when enabled for the deployment and you opt in below. These providers may process data outside your location under their own applicable terms and privacy notices. We also disclose information when legally required or necessary to investigate abuse or protect the service, limited to the relevant purpose.

Retention and deletion

Sandbox, invitation and optional evidence lifetimes follow the scope and deadlines shown for the operation. Ending access and completing provider cleanup are separate steps; retained deletion/audit records can document their status. Do not assume that closing a browser or ending a sandbox immediately removes all records from every provider.

Account, immutable welcome-grant and accounting records can remain after a preview ends to prevent duplicate grants, reconcile funds, address disputes, meet applicable recordkeeping duties and establish cleanup. Support and security records are kept for their relevant purpose. We review continued need rather than promising one deletion deadline for all data. Provider backups, payment records and legal holds may have different retention requirements. Ask support about the records associated with your account.

Your requests and choices

You may request access to and correction of your personal data, ask about deletion or account closure, and raise a privacy concern at support@mydocker.com. We may verify account ownership before acting and explain any records that must be retained and why. Other rights and complaint routes depend on applicable law. You can withdraw optional analytics consent below at any time; withdrawal does not undo earlier processing.

Necessary HttpOnly session cookies support sign-in and expire after 12 hours. The analytics preference is stored locally in your browser. MyDocker does not put GitHub OAuth codes or access tokens in browser storage. Future material changes to this policy will be identified by an updated version date and communicated as appropriate.