Privacy Policy

Who we are

Vedetta is an independent, unofficial native client for Sentry.io, available on iOS and Android. It lets you triage issues, read stack traces, and receive alerts from your own Sentry account.

In this policy, "we," "us," and "Vedetta" refer to the independent developer of the Vedetta app. If you have any questions, you can reach us at hello@getvedetta.com.

The short version

• You sign in with your own Sentry access token. It is stored only on your device and sent only to Sentry, plus the Vedetta push relay if you turn on notifications.
• Your Sentry issue and event data is fetched from Sentry's API and processed on your device for display. We do not store that content on our own servers.
• Optional, opt-in product analytics and crash diagnostics help us improve the app. They are off by default in development builds and never used for advertising.
• No data is sold. There are no third-party advertising SDKs, and no tracking across other apps or websites (no IDFA, no App Tracking Transparency tracking).
• You can revoke access at any time by signing out, and you can turn analytics and notifications off whenever you like.

Data we collect, and why

Your Sentry access token

To connect to Sentry, you provide your own API auth token. The token is stored only on your device, in the iOS Keychain on Apple devices and in Android's encrypted storage on Android devices. It is transmitted only to Sentry's own API (for example sentry.io and regional endpoints such as de.sentry.io) and, if you enable push notifications, to the Vedetta push relay (push.getvedetta.com) so your device can be registered for alerts. The token is never sold and is not shared with anyone else.

Your Sentry issue and event data

When you use the app, it fetches your organization's issues, events, stack traces, and related details from Sentry's API and processes them on your device so they can be displayed. This is your own data, shown back to you. Vedetta does not collect or store this content on its own servers. A short-lived on-device cache may keep the most recent view available offline; it lives only on your device and is removed when you sign out or uninstall the app.

Product analytics (optional, opt-in)

If you choose to enable analytics, Vedetta uses PostHog (processed in the EU region, via eu.i.posthog.com) to collect anonymous product-interaction events, such as which screens you view and which features you use, together with a generated device or installation identifier. This helps us understand which parts of the app are useful and where to improve. Analytics are disabled by default in development builds, are opt-in, are not used for advertising, and involve no cross-app tracking (no IDFA and no App Tracking Transparency tracking).

Crash and performance diagnostics (optional, opt-in)

If you choose to enable diagnostics, Vedetta uses the Sentry SDK (processed in the EU region) to collect crash reports, errors, and performance traces about the Vedetta app itself, so we can find and fix stability and performance problems. This data is about the app's behavior, not about your identity, and it is not used for advertising. Like analytics, it is opt-in and off by default in development builds.

Push notification tokens (only if you enable notifications)

If you turn on push notifications, your device's push token (from Apple's APNs or Google's FCM) is stored by the Vedetta push relay and bound to your Sentry organization, solely so issue-alert notifications can be delivered to the right device. Tokens that become invalid are pruned automatically.

What we do not do

Legal basis for processing (GDPR)

For people in the European Economic Area, the United Kingdom, and other regions with similar laws, we rely on the following legal bases under the GDPR:

• Performance of a contract / your request. Storing your access token on your device and using it to fetch and display your Sentry data is necessary to provide the app you asked for.
• Consent. Product analytics, crash and performance diagnostics, and push notifications are processed only after you opt in, and you can withdraw your consent at any time by turning them off.
• Legitimate interests. Where applicable, keeping the app stable and secure is a legitimate interest, balanced against your rights. We keep this processing to the opt-in diagnostics described above.

How your data is shared, and our sub-processors

We do not sell your data or share it for advertising. Data is shared only with the service providers needed to make the features you use work. Depending on which features you enable, these are:

We may also disclose information if required to do so by law, or to protect the rights, safety, and security of our users and the service.

International transfers

The optional product analytics and crash diagnostics are processed in the European Union (PostHog and the Sentry SDK are configured to use EU region endpoints). Your own Sentry data is handled by Sentry according to the region your Sentry account uses, for example the US or EU. Push notification delivery uses Apple's and Google's global infrastructure. Where data is transferred internationally, we rely on appropriate safeguards such as the standard contractual clauses offered by these providers.

Data retention

• Your access token stays on your device until you sign out or uninstall the app, which removes it.
• Your Sentry data is not stored on our servers. Any on-device cache is short-lived and is cleared when you sign out or uninstall.
• Push tokens are retained by the push relay only while they are valid and you have notifications enabled. Invalid tokens are pruned automatically, and signing out or uninstalling removes your device's token.
• Analytics and diagnostics are retained by PostHog and Sentry for the limited periods needed to analyze product usage and stability, and only if you opted in.

Your rights and choices

You are in control of your data in Vedetta:

• Revoke access. Sign out at any time to clear the locally stored access token from your device.
• Turn off notifications. Disable push notifications to stop alert delivery; your device's push token is pruned when it is no longer valid.
• Turn off analytics and diagnostics. These are opt-in, and you can disable them whenever you like.
• Uninstall. Removing the app deletes the local token and on-device cache, and your push token is pruned.

Depending on where you live, you may also have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. Because your Sentry content lives in your own Sentry account, requests about that data are best made through Sentry. For the limited data Vedetta handles, such as analytics, diagnostics, or push tokens, contact us at hello@getvedetta.com and we will help. You also have the right to lodge a complaint with your local data protection authority.

Children's privacy

Vedetta is a developer tool and is not directed to children. It is not intended for use by anyone under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to remove it.

Changes to this policy

We may update this policy from time to time, for example to reflect new features or changes in the law. When we do, we will revise the "Last updated" date at the top of this page, and significant changes may be highlighted in the app. Your continued use of Vedetta after an update means you accept the revised policy.

Contact

Questions, requests, or feedback about privacy? Email us at hello@getvedetta.com.