what we actually collect 👀
Your data, respected
What kordrun collects — and what it doesn’t.
Last updated: June 2026We collect the minimum needed to run your account, track no one around the web, and never sell your data. 🔒
Who we are
kordrun is built and operated by Mohit Kadwe, an individual maker. This policy covers both the website/dashboard and the kordrun CLI.
What we collect
When you sign in and use the dashboard, we store:
- Your profile from Google or GitHub — name, email, avatar, and provider id.
- Your license key and plan.
- Machines you activate — a hardware fingerprint id, so we can enforce seats and let you revoke them.
- A log of transactional emails we send you (delivery status only).
- Any review or feedback you choose to submit.
What we don't collect
- No card details — payments run through Dodo Payments; we never see or store them.
- No ad trackers, no third-party analytics, no cross-site tracking.
- The CLI doesn’t phone home beyond license activation (below).
Cookies
Just two, both first-party: an Auth.js session cookie that keeps you signed in, and a short-lived sign-in state cookie during the OAuth handshake. No tracking or advertising cookies.
Service providers
We rely on a small set of infrastructure partners, each handling only what they need:
- Neon — our Postgres database.
- Dodo Payments — subscription billing.
- Vercel — website hosting.
- Brevo — transactional email.
- Google & GitHub — sign-in.
On your machine
The CLI runs your apps, logs, and Kordfile entirely on your machine. Secrets in your Kordfile environment never leave it and are never written to the state file. The only thing the CLI sends us is a license activation — your key and a machine id — to register the seat and allow revocation.
Retention & deletion
We keep your data while your account is active. Deleting your account from the dashboard removes your profile, license key, and activated machines. Approved public reviews may be retained unless you ask us to remove them.
Security
Traffic is encrypted with TLS, sessions are stored server-side in the database, and license keys are Ed25519-signed. No system is perfectly secure, but we keep the surface small.
Children
kordrun is a developer tool and isn’t directed at children under 16. We don’t knowingly collect their data.
Changes
If this policy changes materially, we’ll update it here with a new date. Continued use means you accept the updated policy.
Contact
Privacy questions or a data request? Email mohitpawar530@gmail.com.