Privacy at Nerudo
Last updated October 14, 2026.
Nerudo is operated by Patrick Deutsch. This notice explains how account sign-in works and what happens to the information it uses.
Signing in
When you choose a configured sign-in provider, you authorize that provider to return basic identity information. Google sign-in requests an account identifier, profile information and email address. Apple sign-in requests an account identifier, name and email address; you can choose Apple’s private relay address. GitHub sign-in requests read access to your user profile. Cloudflare sign-in requests an account identifier through OpenID Connect.
Nerudo stores the provider, issuer, client registration, provider account identifier and display name to associate that sign-in method with your Nerudo account. The current sign-in implementation does not store your provider email address, profile picture, access token or refresh token. Matching email addresses do not automatically link accounts.
The provider handles your password and its own authentication. Nerudo does not receive that password. Sign-in does not request access to Google mail or files, GitHub repositories, or Cloudflare DNS, Workers or other account resources.
Sessions and cookies
Nerudo sets a necessary HttpOnly, Secure session cookie containing a random identifier. Account credentials are kept on the server. OAuth sessions expire after seven days; signing out revokes the current session. Temporary sign-in transactions expire after ten minutes. Expired records are removed by periodic cleanup.
Existing personal and sign-in links remain supported and have their own credentials. Your interface preference can also be saved in a cookie. Nerudo’s own sign-in pages do not add advertising or analytics scripts.
Account settings and credentials
Account settings let you manage connected providers, passkeys, public GPG keys, browser sessions and scoped developer credentials. Passkeys store a public credential and device metadata; the private credential stays with your authenticator. GPG ownership verification stores your public key and verification metadata, never your private key. Git commit attribution comes from the configuration used to create each commit.
Session metadata includes creation, authentication, expiry and last-use times and a bounded browser description. A bounded security activity log records account changes without provider tokens or passwords. Developer credentials are stored as hashes with repository and operation scopes, expiry and last use; their secret value is shown only when created.
Your work and access
Your account and sign-in records persist across sessions. Repository permissions are separate from sign-in. Creating an account does not grant access to private repositories or permission to approve or push changes.
Git commits, repository content, profiles, comments, plans and receipts have the visibility of the features where you create them. Public work may be visible to other people. Signing out or disconnecting a provider at that provider does not erase Git history or revoke an already-issued Nerudo session; sign out of Nerudo as well.
Service providers
Nerudo runs on Cloudflare Workers, Durable Objects and Artifacts. Cloudflare processes application requests and stores application records and repositories. Your chosen identity provider processes its sign-in flow under its own privacy policy.
Questions and requests
You can export your account data and request deletion in Data & deletion. Deletion requires recent sign-in confirmation and resolving repository ownership and memberships. It immediately disables account access and removes personal profile and provider associations; private credential cleanup can retry after a service interruption. Inactive browser records may remain until their original session expiry and scheduled cleanup, and cannot restore access. The username stays reserved to prevent impersonation. Shared Git history, signed receipts and copies held by other people remain.
For privacy questions or help resolving account ownership, contact patrickdeutsch@gmail.com. Deleting Nerudo does not delete your accounts at identity providers.