Legal · GDPR
Privacy notice
For Assert, Assure, Canine Code Analyzer (CCA) and Assay. In force from 1 November 2026.
Who is responsible
Canine Development ApS, CVR 42092134, Vestervej 26, 8500 Grenaa, Denmark is the data controller for the data on this page. Contact: info@canine.dev.
The code in your repositories is processed for you, not for us: for a business that is governed by the data processing agreement.
What we collect, why, and on what basis
| What | Why | Legal basis |
|---|---|---|
| Your sign-in identity from the service you sign in with, such as GitHub or GitLab: login, display name, email address | To give you an account and sign you in | Contract (Art. 6(1)(b)) |
| The organisations you belong to and your role in them | To show you your own repositories and no one else's | Contract |
| Your code and your scan results: the score, the findings and where in the code each one is | To scan your project and show you what was found, now and over time | Contract |
| Your choices: plan, cadence, email settings, the terms you accepted and when | To deliver what you chose, and to prove what you agreed to | Contract; legal obligation for a consumer's consent record (Art. 6(1)(c)) |
| Billing: invoices and what they were for | To charge you and keep the books | Contract; legal obligation (bookkeeping law) |
| Messages you send us, including feedback from the app | To answer you and improve the product | Legitimate interest (Art. 6(1)(f)) |
| Technical logs: IP address, time and address of each request | To keep the service secure and find faults | Legitimate interest |
Payments and email
Card details are entered on Stripe's page and never reach our servers. We send email about your account, your bills and your scans; the progress email after a scan is sent only if you asked for it, and each one has a link to stop it. We send no marketing email.
No cookie banner, because we track nothing
We never ask you about cookies, because there is nothing to ask about. We use no analytics, no advertising, no tracking pixels and no third-party scripts, and our websites load nothing from anyone else: the fonts and images come from our own server.
Our websites set no cookies at all. They remember your light or dark theme, and on a site in several languages your language, in your own browser; that never leaves your device.
The apps set only the cookies they need to work, which the law does not ask consent for:
- a sign-in cookie that keeps you signed in;
- a form-protection cookie that stops other websites from sending forms in your name;
- when you arrive through a referral link, a cookie that carries the referral code through sign-in so you get the discount it gives; it is deleted after an hour;
- a cookie that remembers, for this visit only, that you chose to do a setup step later.
Who else sees it
Stripe Payments Europe, Limited (Ireland) processes payments, as an independent controller for its own legal duties; Stripe may transfer data to the US under its own agreement, which uses the EU standard contractual clauses and the EU-US Data Privacy Framework. No one else: sign-in, email, the database and the logs run on hardware we own in Denmark. We sell no data and share none for advertising.
How long we keep it
- Your account until you close it. Closing takes 14 days, during which you can undo it; then your identity and sign-in are erased and your account record is anonymised.
- Your code only in memory while a scan runs; the copy is deleted when the scan ends.
- Your scan results stay after you close your account, with your projects in your account's organisation, which keeps the name it had.
- Invoices for five years after the end of the financial year, as Danish bookkeeping law requires.
- The record of the terms you accepted for as long as the contract runs and claims under it can still be made.
- Technical logs only as long as they are needed to keep the service secure; the server's log rotation then deletes them.
Your rights
You can ask to see the data we hold about you, have it corrected or erased, restrict or object to its use, and receive it in a portable format. Most of it you can see and delete yourself in your account settings; for anything else write to info@canine.dev, and we answer within a month. If you think we handle your data wrongly, you can complain to Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.