deckPrivacy Policy
Deck is a Mac app and this website, both operated by Nischal Dahal ("we", "us"). This policy explains what we collect, why, who we share it with, and what you can do about it. In short: your code, your prompts and what your agents do stay on your Mac. We only handle what we need to sign you in, manage your plan and keep Deck up to date.
What stays on your Mac
The Deck app keeps your conversations, settings, snippets, terminal sessions and file checkpoints on your Mac, in ~/Library/Application Support/deck/. We never receive them.
Coding agents you use in Deck (such as Claude Code, Codex or Gemini CLI) run on your Mac with your own accounts and talk to their providers directly. What you send them is governed by those providers' terms and privacy policies, not ours. Deck doesn't route your prompts or code through our servers.
What we collect
Your account
When you sign in with Google, we receive and store your name, email address, profile picture and Google account ID. We use them to identify your account and show who is signed in.
Sessions
When you sign in, we create a session: a random token, when it expires, and the IP address and browser or app identifier (user agent) it was created from. The app keeps its token in your Mac's Keychain; the website keeps it in a cookie. We use sessions to keep you signed in and to protect your account.
Payments
Payments are handled by Dodo Payments, which acts as our merchant of record. Dodo collects your billing details, including your card, and processes the payment; we never see or store your card number. We receive a customer ID and the status of your subscription (for example, whether it is active and when it renews), which we use to decide whether your plan is active.
Update checks
The app asks our server once a day whether a newer version exists. This request carries your IP address, like any request on the internet, but no account details.
Technical logs
Our server runs on Cloudflare, which records basic request information (such as IP address, the page requested and the time) to operate and secure the service. We use these logs only to keep Deck working and to investigate problems.
What we don't do
- We don't use analytics, advertising or tracking tools on this website or in the app.
- We don't sell or rent your personal information, or share it for advertising.
- We don't send marketing email. We may email you about your account or payments when needed.
Who we share it with
Only the service providers that run Deck for us, each for its own part:
- Cloudflare hosts our server, website and database.
- Google provides sign-in.
- Dodo Payments processes payments and subscriptions.
- GitHub hosts the app's download files.
We may also disclose information if the law requires it, or to protect the rights and safety of our users or ourselves.
Cookies
This website sets only the cookies needed to sign you in and keep you signed in. There are no tracking or advertising cookies. The fonts on this site are served from our own server.
How long we keep it
- Account information: for as long as your account exists.
- Sessions: until they expire (after 30 days without use) or you sign out.
- One-time sign-in codes: deleted after use, and never kept longer than a few minutes.
- Payment records: kept by Dodo Payments as required by tax and accounting law.
Your choices and rights
You can ask us to show you, correct, export or delete the personal information we hold about you, or to close your account. Email nischaldahal01395@gmail.com and we'll respond within 30 days. Depending on where you live, you may have further rights under laws such as the GDPR, and the right to complain to your local data protection authority.
You can stop using Deck at any time. Cancelling your plan doesn't delete your account; ask us if you'd like it deleted.
Security
Connections to our server are encrypted, session tokens are random and stored securely, and the app keeps its token in the Keychain. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you.
Children
Deck is not intended for children under 16, and we don't knowingly collect information from them.
International transfers
Our service providers may process information in countries other than yours, including the United States. They are required to protect it.
Changes
If we change this policy, we'll update it here and change the date above. If the change is significant, we'll let you know in the app or by email.
Contact
Nischal Dahal, Nepal · nischaldahal01395@gmail.com