Privacy Policy
Effective and last updated August 10, 2026
Overview
Poracode is one application across Electron, browsers, installed PWAs, and native shells. Browser and native clients connect to a Poracode host that you control. The app may send the privacy-bounded product analytics and crash diagnostics described below when they are configured. Poracode does not show ads or sell personal information. This policy also explains the limited services used by the Poracode website and optional push notifications.
Data handled by the app
When you pair a host, the app stores connection details such as the host name and identifier, endpoint, access token, and your client preferences. It also receives and caches the projects, threads, terminal output, files, and settings that your paired host makes available. This data is used to provide the features you request.
Camera and QR scanning
Camera access is optional and is used only to scan a pairing QR code. Video frames are decoded on your device. Poracode does not record, store, or upload camera images or video. You can pair by entering the endpoint and token instead.
Host connections and storage
App requests and live updates travel between your device and the paired host. Native builds keep pairing credentials in the operating system's secure storage; the web app uses encrypted browser storage when supported. Removing a paired host deletes its saved connection data from the app.
Connections can use HTTPS or, in native builds, HTTP on a trusted local network. HTTPS encrypts data in transit; plain HTTP does not. Only use an HTTP endpoint on a network you trust.
Optional push notifications
If you enable notifications, the native app receives an Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) token; an installed web app creates a browser Push API subscription. The app sends that registration to your paired host. The host may send the registration and notification content through Poracode's hosted service at poracode.com, which forwards the message to APNs, FCM, or the browser push service. Notification content can include a project or thread name and status needed to show the alert; host privacy settings can redact identifying titles. Apple, Google, Mozilla, Microsoft, and Poracode's hosting provider may process delivery data under their own terms. You can disable notifications or remove the paired host to unregister the device.
Application diagnostics and analytics
When configured for a release, Poracode sends allowlisted product events to PostHog using anonymous installation and session identifiers. Events describe feature use, app and platform versions, and bucketed counts or durations. Person profiles are disabled, and events do not include prompts, file content, terminal output, or project and thread names or identifiers.
Configured releases may send scrubbed crash diagnostics to Sentry. Default personal information, screenshots, breadcrumbs, and performance traces are disabled. The public Poracode website uses Vercel Analytics and Speed Insights to understand aggregate site usage and performance.
Sharing and retention
Poracode does not sell or rent app data or use it for advertising. Data is shared only when needed to connect to services you choose through the paired host, to deliver optional notifications, to operate the website, or when required by law.
Pairing data and cached content remain on your device until you remove the host or clear the app's data. Push registrations remain on the paired host until they are unregistered or removed. Hosting and notification providers may retain operational or security logs according to their policies.
If you email support or open a GitHub issue, Poracode receives the information you choose to provide and uses it to investigate the request and respond.
Security and children
Poracode uses access tokens and platform security features to protect connections and stored credentials, but no system is completely secure. Poracode is a developer tool and is not directed to children under 13.
Changes and contact
We may update this policy as Poracode changes and will publish the new effective date here. Questions or privacy requests can be sent to support@poracode.com.