Privacy

What nipa does with your data

nipa runs on your computer and has no telemetry. This page says what it sends, to whom, and what it keeps on your disk.

Lake George, John Frederick Kensett, 1869

Last updated

In short

  • The nipa command-line tool sends your login to the Keystone you log in to, and to nobody else. Its author never receives it.
  • nipa has no telemetry, analytics or crash reports.
  • This site sets no cookies and loads no analytics or trackers.

What the tool sends

When you run nipa login, nipa sends your email, password and OTP code to the Keystone of your profile. For Nipa Cloud, that is identity-api.nipa.cloud. Keystone answers with a token.

Commands such as nipa server ls send that token to the Space API of the same profile to read or change your resources. With nipa os, nipa tf and nipa exec, nipa passes the token to the tool you run, and that tool decides where it goes.

In a terminal, nipa asks GitHub for the newest release at most once a day, so it can tell you about an update. The request carries no data about you or your account, but GitHub sees your IP address, as any server does. Set NIPA_NO_UPDATE_CHECK to turn it off.

What the tool keeps on your computer

  • Your token, your email and the project you last used, in ~/.config/nipa. The files have mode 0600, so only your user can read them.
  • Your password, only when you run nipa login --remember. It goes to the macOS Keychain, or to the secret service on Linux.
  • A folder's linked project in .nipa/project.json, when you run nipa link.

nipa never saves your OTP code or its secret. nipa logout revokes the token and deletes the session and the saved password. To remove everything, delete ~/.config/nipa. How nipa logs in has the details.

This site

This site is a set of static pages. It has no accounts and no forms, and it sets no cookies. The terminal on the home page is a demo that runs in your browser with made-up data, and what you type into it stays on the page.

The server that hosts the site sees your IP address and browser when it sends you a page, as any web server does. Links to GitHub, npm and The Met lead to sites with their own privacy policies.

Your Nipa Cloud account

What Nipa Cloud does with your account and your resources is under Nipa Cloud's own privacy policy. This page covers only the nipa tool and this site.

Questions and changes

nipa is open source, so you can read what it sends in the code. Ask a question by opening an issue. When this page changes, the date at the top changes with it.