Privacy policy

pgMustard collect, store and use the following pieces of personal information:

Name & email address

We need these to identify and contact you about the service.

They’re stored in our database (hosted in Finland), in Mailchimp, in any correspondence that we receive from you, and in documents on Google Sheets.

If you cease to be a customer, we’ll remove most of these references, but we’ll keep the ones that are needed to hold a record of the service we provided to you — for example correspondence requesting us to cancel your subscription, or an entry in the database which records that you have used your free trial and are no longer entitled to one.

Query plans

We need these to provide the performance analysis that is our service.

They go to our server (in the Google Cloud data centre in Finland) to be processed, but we don’t store them unless you tick the box on the account page allowing us to — we don’t even log them if they cause an exception.

If you do tick that box, we’ll use the plans to improve the product. So far, we have used them for:

  • Putting the plan back into the product, looking at the results, and seeing how we could improve them. We do this pretty regularly.

  • Statistical analysis to answer questions like "How long are InitPlan nodes in general?".

  • Understanding the format of EXPLAIN output, for example learning about new fields we haven't seen before, or which fields can reference subplans.

Saved and published query plans

If you choose to save or publish a query plan, it will be stored in our cloud storage (which is also in the Google Cloud data centre in Finland).

Saved plans are private to your account, whereas published plans are made available for anyone to see — whether or not they are signed in to pgMustard.

Published plans shouldn't be indexed by search engines, and they can be deleted by their publisher at any time, after which the published plan will no longer be available on pgMustard.com. However it is safest to assume that third party web crawlers will have made copies of anything that has been freely available on the open internet. Please think carefully about the sensitivity of the data in any plan before you publish it, and if you do accidentally publish security-critical information, assume it has been compromised and make necessary allowances.

Billing information

We need these pieces of information to take payments. They’re managed and stored by our billing, payments and accounts providers (at the time of writing these are Stripe and Quaderno, but we reserve the right to change these without notice).

Technical information

In order to serve web requests, our load balancer needs technical information, such as browser agent and IP address, which it records in its logs. These aren't something we look at much in the normal course of business, although they can be useful for resolving bugs on occasion — for example, determining whether an issue is browser-specific. On balance, we'd probably rather it didn't log this information, but these logs are purged after six weeks.

Other stuff

That’s all we collect in the normal course of business. From time to time, we might collect other information about you, for example your t-shirt size and the address you’d like a pgMustard t-shirt sent to. You’ll know if and when this happens, because you’ll be filling in a form or replying to an email that says, for example, “what’s your t-shirt size?”. We store this information in Google Sheets, and any correspondence we receive from you. We try not to hang onto it for any longer than necessary — for example once we’ve sent you a t-shirt, we’ll delete your address from our records.

We'll never share any of this information with a third party, except with your express permission or as required by law.

This policy was last updated on: 23 September 2022

We keep a history of changes on GitHub.