Privacy policy

Last updated: September 2026

Who we are

pgsenpai is a hosted service that analyses slow PostgreSQL queries. It is operated by the owner of https://pgsenpai.employeekickoff2027.com (“we”). Questions about this policy go to the contact address published on that site.

What we collect

• Account data: your email address, a salted hash of your password, your chosen theme, and login timestamps.
• Analysis requests: the connection details you enter except the password (host, port, database and user names), the options you chose, and the time of the request.
• Analysis results: the report, the run log and companion files produced by the analysis. These contain statement text from your database's pg_stat_statements view or your own ranking query, execution plans, and table and index statistics.
• Server logs: the web server records request paths, timestamps and IP addresses for security and debugging, and keeps them for up to 30 days.
• Page counts: we count visits per page and day on our own server. This uses no cookies and identifies nobody.

What we never keep

Your database password. It is passed to the analysis process through its environment for the duration of one run and is not written to the database, the saved configuration, or any log. Every saved configuration is stored with the password stripped.

Cookies

• pgs_session – keeps you logged in (essential, up to 14 days).
• pgs_csrf – protects forms against cross-site requests (essential, 7 days).
• pgs_theme – remembers your theme (essential to the feature, 1 year).
• pgs_consent – remembers your answer to the cookie banner (180 days).
• pgs_flash – carries a one-line status message to the next page (1 minute).

No third-party analytics or advertising scripts are loaded.

How we use the data

To run the analyses you request, show you the results, keep your account secure, and understand which pages are used. We do not sell data and we do not use it to train models.

Who can see your reports

You, and the site administrator, who needs access to operate the service and help with support. Nobody else.

Retention and deletion

Reports stay until you delete them from the analysis page. Deleting an analysis removes its files immediately. To delete your account and everything in it, contact us at the address published on the site; the administrator can also remove accounts from the admin panel.

Security

Traffic is encrypted with HTTPS. Passwords are hashed with scrypt. Reports are served with a content-security sandbox so a script inside a report cannot act on your behalf on this site. The analysis itself only runs read-only statements against your database.

Changes

When this policy changes, the date at the top changes with it.