Privacy policy

Last updated October 18, 2026

This policy explains how Codistry Inc. ("Codistry", "we", "us") collects and uses personal information when you visit Siderail or use it. Codistry is a Delaware corporation at 99 Wall Street, Suite 2048, New York, NY 10005, and is the controller of the information described here.

1. Scope

This policy covers visitors to Siderail and people with a Siderail account. It does not cover the applications you run on your servers: you decide what those collect from their users, and you are responsible for their privacy practices.

2. Information we collect

• Account information: your email address, name and password. We store passwords only as a one-way hash.
• Sign-in with Google or GitHub: if you use it, we receive your account identifier, email address and name from that provider.
• Security and usage data: IP address, browser details, sign-in and verification events, and request logs, used to keep accounts secure and prevent abuse.
• Servers and content: details of the servers you create and the operations you run through Siderail, and the files and data you transfer or edit with it.
• Connected accounts and secrets: credentials you choose to store for your servers or connected tools.
• Billing information: if you buy a paid plan, billing details are handled by our payment processor. We do not store full card numbers.
• Messages: what you send us when you contact us.

3. How we use it

• To provide Siderail: create and manage your account and servers and perform the operations you request.
• To send account emails, such as email verification, password resets and important service notices.
• To protect Siderail and its users: prevent fraud, spam and abuse, and investigate security incidents.
• To bill for paid plans.
• To fix problems and improve the service.
• To meet legal obligations and enforce our terms.

We do not sell your personal information or use it for advertising.

4. Sharing

We share personal information only with service providers that process it for us, under contracts that limit their use of it:

• Cloudflare, for bot protection on sign-up and sign-in forms and for network services;
• Amazon Web Services, for sending account emails;
• the infrastructure providers that host Siderail and the servers you create;
• Google or GitHub, only when you choose to sign in with them;
• a payment processor, when you buy a paid plan.

We may also disclose information when the law requires it, to protect the rights and safety of users or the public, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.

5. Cookies

We use only the cookies needed to run Siderail: a session cookie that keeps you signed in and a security cookie that protects forms. We do not use analytics or advertising cookies. Cloudflare's bot protection may process technical information from your browser to tell people from bots.

6. Retention

We keep account information while your account is open. Sessions expire after 24 hours, and email links and security counters expire shortly after use. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep it longer for legal, security or billing reasons. Copies in backups are removed as those backups expire.

7. International transfers

We are based in the United States, and our service providers may process information in other countries. Where the law requires it, we use recognized safeguards for these transfers, such as the European Commission's standard contractual clauses.

8. Your rights

Depending on where you live, including under the GDPR in the EU and UK and the CCPA in California, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. To make a request, email legal@siderail.co. We may need to verify your identity first. We will not treat you differently for exercising these rights. You can also complain to your local data protection authority.

9. Security

We protect personal information with measures such as encrypted connections, hashed passwords, expiring sessions and limited internal access. No system is perfectly secure. You are responsible for the security of your own servers and the software you run on them.

10. Children

Siderail is not intended for children under 18, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy. If a change is material, we will tell you by email or in Siderail before it takes effect. The date at the top shows the latest version.

12. Contact

Codistry Inc., 99 Wall Street, Suite 2048, New York, NY 10005, USA. Email legal@siderail.co.