Legal
Privacy policy
Last updated: 23 September 2026
This notice explains how Release Compass processes personal data. The controller is Pichner Gábor EV., trading as Pichner Gábor EV. — TechTrail, Hungary (registration 58563166, tax 48268822-2-39). Contact: info@techtrail.io, +36 30 269 8814. Company details: https://techtrail.io/en/contact/.
What we process
- Account data: email address, password hash (never the password itself), optional passkeys, optional authenticator secrets and recovery-code hashes, and session tokens kept in your browser’s local storage so they stay available in other tabs on this site.
- Project content you submit: release notes, request titles, and optional requester or voter labels that your team sends through the API or MCP.
- Changelog subscriber emails and channel preferences, after you confirm the subscription.
- Technical logs needed to run the service (request identifiers, project identifiers, duration). We do not log Authorization headers, API keys, tokens, or passwords.
- Operator notices: when an account is created we email the operator the signup address and method, and we send a weekly digest of aggregate counts (accounts, projects, published notes, subscribers, API use). Those mails are for operating the product, not marketing.
Legal bases (GDPR Art. 6)
- Contract (Art. 6(1)(b)) — creating and operating your account, projects, API keys, changelogs, and request boards.
- Consent (Art. 6(1)(a)) — email subscriptions to release notes, and optional analytics cookies. Confirm the link to subscribe; every message includes a link to change channels or unsubscribe. Analytics load only after you accept in the cookie banner. You can withdraw either choice at any time.
- Legitimate interests (Art. 6(1)(f)) — keeping the service secure (rate limits, hashed vote de-duplication, abuse prevention), operating the product (signup and weekly operator notices), and answering support mail. You may object.
- Legal obligation (Art. 6(1)(c)) — invoices and Hungarian tax records where we must retain them.
Cookies and similar storage
Sign-in tokens live in local storage, not cookies, so a session opened in one tab is available in another tab on this site. That storage is strictly necessary for the account you asked for.
If this site is configured with Google Analytics or Google Tag Manager, those scripts stay off until you accept. Accepting allows analytics storage only. Advertising storage stays denied. Rejecting stores that choice in a first-party cookie named rc_analytics_consent for about six months and does not load the scripts. Cookie settings in the footer lets you opt out later; opting out deletes Google analytics cookies and reloads the page. When those IDs are not configured, the banner is hidden and no analytics cookies are set.
Processors and transfers
Depending on how an instance is hosted, email may be sent with Amazon SES and data stored in Amazon DynamoDB. If you accept analytics, Google Analytics and Google Tag Manager (Google Ireland / Google LLC) receive the usual analytics events. Those processors act on our instructions. If a hosting region is outside the EEA, transfers rely on the EU–US Data Privacy Framework where applicable and/or the European Commission’s Standard Contractual Clauses, with supplementary measures as needed. Local development can run without those processors.
Request boards and names
Votes are accepted only through the API or MCP, never from the public page. Project admins choose whether requester and voter names are shown. Names are stored only if a caller sends them. Do not send special-category data.
Retention
Account and project data stay until you delete the account or we close it after prolonged inactivity. Subscriber emails are dropped on unsubscribe or account deletion. Hashed vote records stay with the request so duplicates can be rejected. Tax invoices follow Hungarian retention rules.
Your rights
You may request access, rectification, erasure, restriction, portability, and objection, and you may withdraw consent for email. Write to info@techtrail.io. You may also lodge a complaint with NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság) (https://www.naih.hu/, ugyfelszolgalat@naih.hu, Falk Miksa utca 9-11, 1055 Budapest, Hungary).
Children
Release Compass is a B2B product. We do not knowingly offer accounts to children under 16.