Privacy notice

This is a plain-language notice for pyscriptc usage telemetry. It is a draft for the maintainer to review; it is not legal advice.

Controller

Controller: [PLACEHOLDER: name of the person or entity responsible]
Contact: [PLACEHOLDER: EU postal address and email for privacy requests]

What is collected

A random install id, the pyscriptc and Python (major.minor) versions, the OS family, the subcommand you ran, and for compile and coverage an outcome, a duration and aggregate fence counts with diagnostic family names.
The exact field list is the table in the telemetry guide.

What is not collected

Source code, file names and paths, user names, host names, machine ids, MAC addresses, imported module names, environment variables and argument values.
Nothing is read from your hardware to build the id.
Every event asks PostHog not to store the client IP, not to geolocate and not to create a person profile.

Purpose: find out which unsupported constructs block users the most, to prioritise the roadmap.
Legal basis: [DECISION FOR THE MAINTAINER: consent (GDPR Art. 6(1)(a), requires opt-in) or legitimate interest (Art. 6(1)(f), opt-out with a notice and a documented balancing test)].
The current shipped default is opt-out with a first-run notice; the opt-in switch exists and is documented in the pull request that introduced this page.

Who processes it

PostHog (EU cloud, eu.i.posthog.com) as processor, under its data processing agreement. [PLACEHOLDER: confirm the DPA is signed and the project lives in the EU region.]

Retention

Raw events are kept for 90 days, then deleted. [PLACEHOLDER: set the matching data retention in the PostHog project settings so this statement is true.]

Your rights

You can ask for access to, erasure of, or to object to processing of your data, and withdraw consent if consent is the basis.
Because the id is random and stored only on your machine, we can only find your events if you tell us the id: run cat ~/.config/pyscriptc/telemetry-id (or $XDG_CONFIG_HOME/pyscriptc/telemetry-id) and send it to the contact above with your request.
Without the id we cannot link any event to you, and the data is not otherwise attributable.
You can also stop all future collection yourself: pyscriptc telemetry disable, PYSC_NO_TELEMETRY=1 or DO_NOT_TRACK=1, and pyscriptc telemetry reset-id to cut the link to past events.
You may complain to your national data protection authority.