Privacy

Draft for the owner's review. Last updated 14 October 2026.

What StayPuller is

StayPuller keeps your files in step across your devices. Your files live in your Storage Pod, a private GitHub repository that you own. They are not stored by StayPuller.

What we store

• Account: your email address and a salted hash of your password (we never keep the password itself).
• Devices: the name and type of each device you sign in, when it was last used, and a hash of its sign-in token.
• GitHub connection: the number of the StayPuller GitHub App installation and the name of your Storage-Pod repository. When a device needs access, StayPuller asks GitHub for a token that lasts one hour and works only for that one repository.
• Google connection: the Google account address and a long-term access token from Google, encrypted before it is saved. A device asks StayPuller for a one-hour token and then talks to Google directly.
• Adding files from the web: when you add files on staypuller.com, your browser sends them directly to your GitHub repository using a one-hour token that StayPuller requests for that one repository. The files do not pass through StayPuller's servers, and StayPuller does not keep a list of them.
• Technical data: short-lived sign-in sessions, and request logs kept by our hosting provider.

What we don't do

• We don't store or read the contents of your documents, and they do not pass through StayPuller.
• With Google connected, your contacts go from Google directly to your device. StayPuller does not read or keep them.
• We don't sell your data, show ads, or use analytics or tracking.

Be aware: because StayPuller can ask GitHub for a token to your Storage-Pod repository, a breach of StayPuller could expose that repository. We limit the access to that one repository and to one hour at a time.

Google user data

StayPuller's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request read-only access to your contacts, and use it only to let your own devices save them into your own Storage Pod.

Who we share data with

Our hosting provider (DigitalOcean) stores the account data above. Our email provider (Resend) delivers the confirmation and password-reset messages we send you. GitHub and Google handle the connections you authorize.

Your choices

• Disconnect GitHub or Google on the Connections page. Disconnecting Google also revokes StayPuller's access at Google.
• Sign a device out on the Devices page.
• Delete your account on the dashboard. This removes everything above. Your GitHub repository is untouched; uninstall the StayPuller app at github.com/settings/installations to remove its access there.

Contact

Questions about privacy: [email protected].