Privacy

Privacy Policy

Effective 8 October 2026

BureauCat is open-source software. This policy explains what data the BureauCat project handles on the services it runs itself: this website (www.bureaucat.org) and the public demo instance linked from it. It does not cover copies of BureauCat that other people or organisations host.

Self-hosted instances

When you self-host BureauCat, all data stays on your infrastructure and the organisation running the instance is responsible for it. The software does not send telemetry, usage data or content back to the BureauCat project.

This website

The website is a static page. It uses no analytics, no tracking cookies, no advertising and no third-party scripts; fonts are served from this domain. Your theme preference (light or dark) is stored in your browser's local storage and never leaves your device. Like most web servers, ours may record standard request logs (IP address, user agent, requested URL and time) for security and troubleshooting. These logs are kept for a limited time and are not used to profile visitors.

Demo instance

If you create an account on the demo instance, we store what is needed to run it: your name, username, email address, a bcrypt hash of your password, and the projects, tasks, comments and files you add. A sign-in cookie keeps you logged in; it is used only for authentication. If you sign in with a third-party provider such as Google, we receive your basic profile (name and email) from that provider. Email notifications are off unless you turn them on. The demo is for evaluation: do not store confidential or sensitive information in it, and data may be reset without notice.

Sharing

We do not sell, rent or share personal data with third parties for marketing. Data is disclosed only when required by law, or to the hosting providers that run the infrastructure.

Your rights

You can ask us to access, correct or delete the personal data we hold about you by emailing shenoy.ameya@gmail.com. Depending on where you live, you may have further rights under laws such as the GDPR or India's Digital Personal Data Protection Act, 2023.

Changes

If this policy changes, the updated version will be posted on this page with a new effective date. Questions? Email shenoy.ameya@gmail.com.