Privacy Policy

The short version

• The marketing site (gethover.dev) sets no tracking or advertising cookies and runs no analytics.
• The Hover MCP and VS Code extension run locally. Your specs, traces, and source code stay on your machine and in your repo — we never receive them.
• Hover Cloud is opt-in. Only if you sign in do we store your account and the CI test-results you choose to send us. We never run your tests and never receive your source code.

The marketing site

gethover.dev serves static pages and documentation. It sets no advertising or analytics cookies and embeds no third-party trackers.

Your browser may keep a couple of small values in local storage on your device — your cookie-consent choice and your language / theme preference. These stay on your device and are not transmitted to us.

Local tools (MCP & extension)

The @hover-dev/mcp server and the VS Code extension run inside your own coding agent and editor, driving your local dev browser over CDP. Their output — Playwright specs, traces, and the .hover/ knowledge files — is written into your repo. None of it is transmitted to us.

Any model or API key belongs to the coding agent you run. Hover holds no keys and bundles no model, so there is nothing for us to receive.

Hover Cloud (only if you sign in)

Authentication is through GitHub. Via GitHub OAuth and the Hover GitHub App we receive your GitHub account details (username, name, email, avatar) and the repository access you explicitly grant.

We process this data to provide the service you asked for (performance of a contract) and to keep it secure and working (our legitimate interests). We do not sell it or use it for advertising.

• Account & team — your profile, organization / team, and membership.
• Connected repositories — the repos you choose to link.
• CI run results — what your workflow sends to our ingest endpoint: test outcomes, timing, flakiness, failure and trace metadata, and the coverage / business-map data derived from your own specs.

What we never receive

Hover Cloud runs no browsers and executes none of your tests — that stays in your CI. We do not receive your application source code. Cloud reads the results your CI reports; it does not read your codebase.

Cookies

We use no advertising, marketing, or cross-site tracking cookies.

The consent banner records your choice in your browser’s local storage so we don’t ask again — you can change it any time from “Cookie preferences” in the footer.

Signing in to Hover Cloud sets a strictly-necessary session cookie so you stay logged in. It is essential to the service and is not used for tracking. If we ever add first-party, privacy-friendly product analytics, it will run only after you consent.

Sub-processors

We run the service on a small set of providers who process data on our behalf:

• GitHub — authentication and repository integration.
• Vercel — application and site hosting.
• Supabase — database and authentication storage.

International transfers

These providers may process data in the United States and other countries. Where required for transfers out of the EEA / UK, we rely on Standard Contractual Clauses or an equivalent safeguard.

Data retention

We keep your account and run data while your account is active. Delete your account, or email us, and we remove your personal data — except where we must retain limited records to meet legal obligations.

Your rights

Under the GDPR and similar laws you can access, correct, delete, export, restrict, or object to our processing of your personal data, and withdraw consent at any time.

To exercise any of these, email gethover@hyperyond.com. You also have the right to lodge a complaint with your local data-protection authority.

Children

Hover is a developer tool and is not directed to anyone under 16. We do not knowingly collect personal data from children.

Changes

We’ll update this page when our practices change and revise the date above. Material changes will be surfaced on this page or in-app.

Contact

Questions about privacy? Email gethover@hyperyond.com. Hover is operated by Hyperyond.