Legal

Privacy Policy

Last updated: 8 August 2026

This policy explains what Muster collects when you use the Muster website and app, and what we deliberately do not. It is short because we hold very little.

For the purposes of the GDPR and similar laws, the data controller is Muster. Every privacy request reaches the people who run Muster at support@musterup.dev.

Muster is desktop software that runs on your machine. Your source code, databases, database contents, SSH keys, credentials, terminal sessions, and the work your AI agents do stay on your machine and your own servers. None of it is sent to, proxied by, or stored on our servers.

What the app sends us

Muster contains no analytics, no telemetry, and no usage tracking. The app talks to our servers in these places, and nowhere else:

Starting a trial, once per account: your email address, from the account you're signed into. The card you save for the day-7 charge goes to Stripe, not to us — we keep only Stripe's customer and payment-method identifiers, never card numbers. No device identifier is sent at this point; that arrives only when you activate the trial key (see Activation below).
Activation, once per device: your license key, your device identifier, and your computer's name.
The daily revocation check: your license key and your device identifier. It does not send your computer's name.
The update check at launch: a request for a small version file for your operating system and CPU architecture. No license key, no device identifier.
Downloads you start: a new version when you accept an update. Also the signed helper binary, installed the first time you connect to a remote host of a given platform.

Each of those is an ordinary web request. Our host sees your IP address and the app version, as any website you visit would. Muster reaches everything else directly, with us out of the path: your repositories, databases, servers, trackers and AI-agent CLIs.

What we collect

Account: your email address, to create your account and give you access to your license. Sign-in runs through our auth provider, WorkOS, and we store the identifier it assigns you. Plus two housekeeping timestamps: one signs you out everywhere after a password reset, the other rate-limits license-key resends.
Purchase: handled by Stripe. We receive a confirmation, your email, and Stripe's own customer and checkout ids, so we can tie the payment to your license. We do not receive or store your card details.
License records: your license key(s), tier, and purchase/expiry timestamps. Activating adds three more, to enforce the per-device license: a per-device identifier, your computer's name, and activation timestamps. The name is there so you can tell your devices apart on your dashboard. That per-device identifier is a salted SHA-256 digest of your machine's operating-system id, truncated to 128 bits, so your raw machine identifiers never leave your device.
Trial: if you start the 7-day trial (card up front), we store your email address along with the trial's start and expiry timestamps. The per-device identifier is added when you activate the trial key on a machine — so each account and each device gets one trial, and so a later purchase can be marked as a conversion.
Basic operational logs: standard request metadata from our host (Cloudflare) used to run and secure the service.

That is the whole list. None of it describes how you use the app.

Why we use it

To deliver and support your license, process your purchase, email you your license key, and prevent abuse. Nothing else. We do not sell your personal data. We do not use it for advertising.

Service providers

Stripe — payment processing.
WorkOS — account sign-in (email/password; we may also offer optional sign-in via Google or GitHub, and if enabled it runs through WorkOS).
Resend — sending your license-key email.
Cloudflare — website hosting and our database.

International transfers

Stripe, WorkOS and Resend process personal data in the United States. Where the GDPR applies, those transfers are covered by its Chapter V safeguards — each provider's Standard Contractual Clauses and/or an EU–US Data Privacy Framework certification. Cloudflare serves this site from its global network under its own data-processing terms. No other transfer of your data takes place: the app itself never sends your code, credentials, or work to anyone.

Cookies

One cookie, set when you sign in: an encrypted, HttpOnly session cookie that keeps you signed in. No tracking cookies, no advertising cookies, and no analytics scripts on this site.

Retention

We keep your account and license records for as long as your account exists, and as long as we need them to support your perpetual license and to meet legal and accounting obligations. You can request deletion of your account data at any time — email support@musterup.dev.

Your rights

Depending on where you live (e.g. GDPR/UK GDPR, CCPA), you may have rights to access, correct, delete, or export your personal data. To exercise them, email support@musterup.dev.

Security

Your license key is a signed token, and the app can verify it without sending it anywhere. That is because the app carries only the public half of the signing key. The private half is held server-side as a secret and is never shipped in the app. Session cookies are encrypted and tamper-evident. We apply reasonable, industry-standard measures to protect the data we hold.

Changes

We may update this policy; the "last updated" date reflects the latest version.

Contact

Privacy questions: support@musterup.dev.