Privacy Policy

Effective 23 September 2026

DockTail Cloud is operated by Marvin von Rappard, Switzerland (“we”). This page explains what the service collects, why, and how long it is kept. Questions go to .

What we collect

• Account data — your email address, and the name and avatar your identity provider returns if you sign in with Google or GitHub. We do not store passwords; sign-in is a one-time email link or OAuth.
• Workspace data — workspace name, members and their roles, invitations, agent keys, alert channel settings, and notification preferences.
• Agent telemetry — what the DockTail agent reports for hosts you connect: a Docker engine fingerprint, host and Docker versions, container and service inventory (names, images, state, health, ports, CPU and memory), check results, Docker failure events, and the incidents derived from them.
• Incident log excerpts — captured when an incident opens, unless you turn log capture off for the workspace or for an individual service. The agent redacts common credentials on a best-effort basis and caps each excerpt at 40 lines and 8 KiB before sending. Redaction cannot recognise every application-specific secret, so turn capture off if your logs carry secrets we cannot pattern-match.
• Billing data — handled by Stripe. We store your Stripe customer and subscription identifiers and your plan state. We never see or store card numbers.
• Usage analytics — pageviews and a small set of product events, collected by a self-hosted Rybbit instance. Detail-page URLs are masked so individual host, service and incident identifiers are not recorded.

What we do with it

We use this data to run the service: to show you your fleet, to detect outages and open incidents, to send the alerts you configure, to bill your plan, and to answer support requests. We do not sell it, and we do not use your telemetry or logs to train models.

Who else sees it

Only the processors we need to run the service: our hosting and managed Postgres providers, Stripe (billing), our email provider (sign-in links and alert emails), and the self-hosted analytics instance above. If you configure an alert channel such as Slack or a webhook, alert content goes to the destination you chose. We also disclose data where the law requires it.

How long we keep it

Health history and check results are retained for your plan’s retention window (1 day on Free, 30 days on Homelab and Team, 365 days on Business). Account and workspace data is kept while your workspace exists. Deleting your workspace deletes its data. Deleting your account deletes your profile, sessions and linked sign-in providers, and every workspace you are the only member of; in workspaces you shared, your past actions stay in the activity log (kept up to 365 days) without your name or email. Billing records are kept as long as tax and accounting law requires.

Where it lives

Data is stored in the EU. Some processors (Stripe in particular) may process data outside the EU/Switzerland under standard contractual clauses.

Your rights

Under the Swiss FADP and the GDPR you can request access to your data, correction, deletion, a copy in a portable format, or object to processing. Most of this is self-serve on your account page (Settings → Account): change your name, download a copy of your data as JSON, see and sign out your sessions, and delete your account. For anything else, or if you can’t sign in, email and we will respond within 30 days.

Your customers’ data

If the container logs or metadata you send us contain personal data about your own users, you are the controller of that data and we process it on your behalf under these terms. Contact us if you need a separate data processing agreement.

Changes

We will update this page when the service changes and adjust the effective date. Material changes are announced by email.