Privacy Policy
Effective 3 November 2026
LogTriage is an independent project. This policy covers the website and free tools at logtriage.app, the product at app.logtriage.app and the API at api.logtriage.app. For anything about your data, write to [email protected].
The short version
- The free tools on logtriage.app — the log analyzer, the log line explainer, the error code lookup and the others — run in your browser. What you paste or drop into them is not sent to us.
- When you upload a log to the product, we keep the file for 7 days and then delete it. The results of the analysis stay in your account until you delete them.
- Parts of a log go to services that help analyze it: when an analysis finds suspicious activity, the suspicious events and summary statistics go to Anthropic's API to write the report, and public IP addresses, file hashes and domains are looked up at threat-intelligence services. Whole files are not sent to them.
- We do not sell your data, share your logs or results, use them for advertising, or use them to train AI models.
What we collect, and why
Your account
Your email address and password. Sign-in is handled by Supabase, and we never see your password. We also keep your plan and credit balance, the API keys you create (stored only as hashes) and the webhooks you set up (the address and its signing secret). When you sign up from a link on logtriage.app, we also store which kind of page the link was on (for example "reference page" or "pricing"), so we can tell which pages bring people to the product; it is part of the link itself, not a cookie or a tracking identifier. We use these to run your account, sign you in and bill you.
The logs you upload, and what we derive from them
The file you upload is stored on our server in Germany and deleted automatically 7 days after the analysis. The analysis itself — the parsed events, detected patterns and the report — is stored in our database until you delete the analysis or ask us to delete your account. Deleting an analysis deletes its events and its report.
We look at analysis results only to answer your support requests, to investigate and fix analyses that fail or read part of a file poorly, and to improve LogTriage's detections — for example by recreating the shape of a file we could not read in our own test data, never its content. When an analysis finds suspicious activity, its suspicious events go to Anthropic's API to write the report; under Anthropic's commercial terms, data sent through its API is not used to train its models.
Billing
Payments are handled by Lemon Squeezy, the merchant of record for every purchase. We receive your name, email address, country and the identifiers of your orders and subscription; we never receive card numbers.
We email the address on your account when an analysis finishes or fails, during your first days (a welcome and a few tips) and when your credits run low. Every email has a one-click unsubscribe link.
Separately, anyone can ask on logtriage.app for the research email: our monthly attack and IP blocklist reports, sent as each edition is published. You do not need an account. We send nothing until you confirm the address from the link we email, every edition unsubscribes in one click, and the address is the only thing we keep. An address that is never confirmed, or is unsubscribed, is deleted after 30 days. We do not send other newsletters or marketing email.
Security and usage records
We keep a record of actions in your account, such as uploads and deletions, with the IP address each request came from, for 12 months. Our web server's access logs (IP address, time, request and user agent) are kept for about 45 days. We publish aggregate statistics from our own server's logs — for example the monthly attack report — and they never contain an IP address.
Website analytics and cookies
logtriage.app and app.logtriage.app use Cloudflare Web Analytics, which counts visits without cookies and without tracking you across sites. We do not use advertising or tracking cookies. The app keeps your sign-in session in your browser's local storage; Cloudflare, which serves our sites, may set strictly necessary security cookies.
Error reports
When the product hits an error, the details of the error go to Sentry, which we have set up not to include personal data.
Who processes data for us
| Service | What it receives | Why |
|---|---|---|
| Hetzner (Germany) | Everything the product stores: uploaded files, analysis results and the database | Server and database hosting |
| Cloudflare | Traffic to our websites and API; copies of the database backups | Network and website hosting, email forwarding, offsite backups, analytics |
| Supabase (AWS, Sydney, Australia) | Your email address and your password, stored hashed | Sign-in |
| Anthropic | The suspicious events of an analysis and summary statistics | Writing the AI report, only when an analysis finds suspicious activity |
| ipinfo.io, AbuseIPDB, AlienVault OTX, abuse.ch (ThreatFox, MalwareBazaar), urlscan.io | Public IP addresses, file hashes and domains found in your logs | Threat-intelligence lookups |
| Google (Gmail) | Your email address and the emails we send you | Sending email |
| Lemon Squeezy | Your billing details | Payments, as merchant of record |
| Sentry | Details of errors in the product | Error tracking |
Some of these services process data outside the European Union, in the United States and, for sign-in, in Australia. Where they do, we rely on the safeguards in their data-processing terms, such as the European Commission's standard contractual clauses.
How long we keep data
| Uploaded log files | 7 days after the analysis, then deleted automatically |
| Analysis results (events, patterns, report) | Until you delete the analysis or your account |
| Database backups | 14 days on our server and up to 60 days in offsite storage, so deleted data leaves the backups within 60 days |
| Research email subscription | Until you unsubscribe; an address that is never confirmed, or is unsubscribed, is deleted after 30 days |
| Records of actions in your account | 12 months |
| Web server access logs | About 45 days |
| Account data | Until you ask us to delete your account |
Your choices and rights
- Delete any finished analysis yourself in the app.
- Download your reports (PDF, CSV, JSON, Markdown, STIX).
- Unsubscribe from any email with the link in it.
- Ask for a copy of your data, a correction, or the deletion of your account by writing to [email protected].
If you are in the European Union or the United Kingdom, you have the rights the GDPR gives you — access, rectification, erasure, restriction, portability and objection — and you can complain to your data protection authority. Write to us first and we will do our best to help.
Security
Connections are encrypted with TLS. The database is not reachable from the internet. API keys are stored only as hashes, and webhook addresses are checked so they can only reach public internet addresses. Backups are taken every night and kept offsite. Access to the production systems is limited to the operator.
Children
LogTriage is a tool for security work and is not intended for anyone under 16.
Changes
We will post changes on this page with a new effective date and email account holders about material changes.
Contact
[email protected] — see also the Terms of Service and About LogTriage.