01Who operates this website
This website and its release and feedback services are operated by SpaceYard maintainers. Use the contact details below for questions about information held by the website.
This notice describes the supplied SpaceYard release website and feedback features. Hosting, email, backups and infrastructure are operated separately; their configuration also matters.
02Your local workspace
The release website does not receive your local Laravel projects, database contents, passwords or terminal sessions just because you install SpaceYard. The release and feedback features do not add background desktop usage tracking or remote control.
An update check contacts the configured update server. Downloading a package or installer contacts its host. Optional remote-server, repository, cloud-storage or sharing features contact the services you configure. Those services have their own policies. Review a report before choosing to send it.
03Issue reports and screenshots
When you send a report, we receive its category, title and description, any reproduction steps, application/Windows details, optional email address and images you choose to attach. A submission reference and consent time are saved. Reports are private to authorized maintainers, not a public issue board.
We use reports to investigate problems, organize fixes and, when you provide an email, contact you about the report. Screenshots are decoded and re-encoded to remove embedded metadata. That does not remove secrets visibly shown in an image. Crop or blur them first.
04Download statistics
When enabled, download analytics count eligible installer requests, not completed installations or active users. They record the release, channel, request source, date, coarse browser/operating-system labels, referrer hostname and a daily pseudonymous identifier.
The identifier is derived from the connection IP and coarse client details using a daily keyed hash. Raw IP addresses and complete user-agent strings are not retained in the download analytics tables. Identifiable bots, prefetched/ranged/conditional requests, administrator requests, and requests carrying Do Not Track or Global Privacy Control are excluded. These signals do not suppress operational security logs.
05Sessions, administration and abuse prevention
The website uses a session and request-verification mechanisms to protect forms and maintainer sign-in. Maintainer accounts contain account details and authentication information; access and release changes are recorded in an audit log.
Abuse prevention can temporarily process connection information in server/cache counters. Web-server, application, mail and security logs can contain IP addresses, request paths, timestamps and errors. Do not put credentials in URLs.
06How long information is kept
Detailed download events are scheduled for removal after 90 UTC days. Aggregated daily totals remain. Feedback screenshots expire after 90 days and become unavailable through their application routes; scheduled cleanup removes the stored files.
Report text, optional contact details, maintainer notes and audit records remain until an authorized maintainer removes them or an operator retention process applies. Removing a screenshot does not remove the report. The scheduler must run for physical cleanup; backups can retain earlier copies until their own retention expires.
The operator’s configured operational-log retention period is 14 days. Backup schedules and incident/legal preservation may differ; contact the operator for details.
08Your choices and requests
Sending a report and providing an email are optional. You can download without creating a public account. You may ask to access, correct or delete information about your report, or withdraw permission for optional follow-up. Include your report reference when available; we may need to confirm that a request concerns you.
Some information may need to remain for security, legal requirements or an ongoing dispute. Depending on applicable law, you may also have rights to restrict or object to processing, receive a copy in a portable format, or complain to a relevant data-protection authority. Contact us to discuss your request and the basis on which information is used.
09Updates to this notice
Material changes should be reflected here with an updated date. A source-availability switch does not make private reports or old private release-source links public.
A question about your information?
Contact SpaceYard maintainers. For an existing report, include its reference. Do not send passwords or identity documents through the issue form.