Legal
TreeHost is operated by Savvy Stack, Inc. ("we", "us", "our"). This Privacy Policy describes how we collect, use, and protect information when you use the TreeHost platform ("Service").
We collect the minimum data necessary to operate the Service. We do not sell your personal data. We do not serve advertising.
| Category | What we collect | Source |
|---|---|---|
| Account data | Email address, display name, profile photo URL | GitHub / Google OAuth at sign-in |
| Waitlist data | Name, email address, institution (optional) | Waitlist form on the landing page |
| Workspace metadata | Workspace IDs, oTree version, project filename, status, timestamps | Created when you deploy a workspace |
| Project files | oTree project zip files you upload | Uploaded by you; stored in your Workspace |
| Usage data | Server access logs (IP address, timestamps, HTTP method, status code) | Generated automatically when you use the Service |
| Prolific integration data | Prolific API token (stored encrypted), study configuration (study ID, room name, session settings, reward, participant count) | Provided by you when connecting a Prolific account; only collected if you use the Prolific recruiting feature |
Participant data. If your oTree experiments collect data from participants, that data is stored within your Workspace (in a Postgres database inside your sandbox). We do not access, process, or store participant data outside your Workspace.
We use the data we collect to:
We do not use your data for advertising, profiling, or automated decision-making that produces legal or similarly significant effects.
We share data with the following third parties only as necessary to operate the Service:
| Service | Purpose | Data shared |
|---|---|---|
| GitHub | OAuth sign-in | Redirects to GitHub; we receive your public profile and email |
| OAuth sign-in | Redirects to Google; we receive your profile and email | |
| Resend | Transactional email (magic links) | Your email address when sending a magic link |
| Cloud computing infrastructure | Hosting and compute | All Service data is processed on our infrastructure |
| Prolific Academic Ltd | Participant recruitment for research studies (optional feature) | When you use Prolific recruiting, TreeHost calls the Prolific API on your behalf using your API token to create, publish, and manage studies. Study configuration and participant submission metadata are exchanged with Prolific. TreeHost does not share your personal account data with Prolific beyond what your own Prolific account already holds. |
We do not sell, rent, or share your personal data with advertisers or data brokers.
Workspaces. Workspace data (project files, oTree database, experiment results) is removed when you tear down a Workspace. When you tear down a Workspace it is soft-deleted and retained for 30 days to allow recovery, after which it is permanently purged. It no longer counts toward your plan limit during this window.
Account data. Your account data (name, email, linked identities) is retained for as long as your account is active. You may export or delete your account at any time from your dashboard, or by request (see Section 7). Account and identity data is erased immediately on deletion; any remaining soft-deleted Workspaces complete their 30-day retention window before permanent purge.
Waitlist data. Waitlist entries are retained until we notify you about access or you request removal.
Server logs. Access logs are retained for up to 90 days for security and debugging purposes.
We implement technical and organisational measures to protect your data, including:
No system is completely secure. If you discover a security vulnerability, please disclose it responsibly by emailing [email protected].
Depending on your location, you may have rights under applicable data protection law (including GDPR and CCPA), including the right to:
Self-service. Signed-in researchers can exercise the access, portability and erasure rights directly: use Export my data to download a machine-readable copy of your account data, or delete your account from your dashboard. Deleting your account cascades to your linked identities, authentication logs and recruiting configuration. You must tear down any active Workspaces before deleting your account.
To exercise any of these rights another way, email us at [email protected]. We will respond within 30 days.
The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the Service. The "last updated" date at the top of this page reflects the most recent revision.
This policy is governed by the laws of the State of California, USA.
For privacy-related questions or requests, contact us at [email protected].
For general questions, email [email protected].