When you sign up, we collect your email address and password (hashed). If you sign in with Google, we receive your name and email from Google.
When you use the scan tool, we send your agent plan to an AI reviewer (MiniMax or OpenAI) for verification. We store the plan hash and verification result — not the full plan text.
We use PostHog to understand how people use the site. PostHog collects anonymous usage data including page views, button clicks, and feature usage. No personally identifiable information is sent to PostHog.
PostHog respects the Do Not Track browser setting. If you have DNT enabled, analytics are not loaded.
We use essential cookies for authentication (keeping you logged in). PostHog sets a first-party analytics cookie to distinguish unique visitors. No third-party advertising cookies are used.
Your data is stored in Supabase (hosted on AWS in the US). The application is hosted on Vercel.
You can request deletion of your account and data by emailing us. We will delete your data within 30 days.
Rubberduck is operated by Magpiexyz Ltd. For privacy questions, contact us via the GitHub repository.
Last updated: April 2026