Privacy Policy

Scalene is an independent client for Vercel. It has no user accounts, no advertising, and no third-party analytics. This policy describes the data the app and its push relay actually handle.

What stays on your device

You sign in by pasting a Vercel API token. That token is stored in the system Keychain on your device and is used to call the Vercel API on your behalf. It is never written to Scalene’s servers and is never shared with anyone other than Vercel and, transiently, the push relay as described below.

Project, deployment, analytics, and usage data are fetched from Vercel directly by the app. Some of this is cached on your device so screens load quickly. Signing out clears the stored token and the cache.

The push notification relay

Notifications require a small server, because Apple’s push service will not accept events directly from Vercel. If you enable notifications, the relay stores:

• An Apple push token identifying the device to Apple’s notification service.
• The Vercel team and project identifiers you subscribed to.
• Your notification preferences, recorded per device so each device can differ.
• A webhook signing secret for the team, used to verify that incoming events genuinely come from Vercel.

When you change notification settings, the app sends your Vercel token to the relay once, for that request only, so the relay can confirm with Vercel that you actually administer the team you are subscribing to. Without that check, knowing a team identifier would be enough for someone else to subscribe their device to your events. The token is used for that single verification call and is never stored or logged.

Deployment events pass through the relay to reach your device. They are held only for as long as delivery takes.

What is not collected

• No analytics, telemetry, or crash-reporting SDKs.
• No advertising identifiers, and no data sold or shared.
• No email address, name, or profile — there is no account.
• No location data.

Deleting your data

Turning off notifications removes your device’s registration and preferences from the relay. Deleting the app removes the stored token and every local cache. Because there is no account, that leaves nothing behind tied to you. If you want a registration removed manually, email support@scalene.app.

Service providers

The relay runs on Vercel and stores the data listed above in a hosted Redis database (Upstash). Push delivery goes through the Apple Push Notification service. These providers process data only to operate the service.

Children

Scalene is a developer tool and is not directed at children under 13.

Changes

If this policy changes materially, the date at the top of this page will change with it.

Contact

Questions about privacy go to support@scalene.app.