Draft. This policy has not yet been reviewed by a lawyer and may change before general availability.

Privacy policy

Last updated October 22, 2026

This policy explains what Bird Rock Trading LLC ("we", "us"), which operates DiscountRunners.io, collects when you use our website, GitHub App and runners, why, and what you can do about it.

What we collect

• GitHub identity. When you sign in with GitHub we receive your GitHub user ID, login, avatar URL and the installations of our GitHub App you can access. We do not receive your GitHub password, and signing in does not grant us access to your repositories.
• Installation and workflow data. When an account installs our GitHub App we store the account's login and type, the repositories it selected, and the workflow job events GitHub sends us for those repositories: repository name, workflow and job names, runner labels, run IDs, status and timing.
• Your jobs. Your workflow code and data run on a VM created for that one job. We do not inspect or retain the contents of your jobs; the VM and its disk are deleted when the job ends. Your workflow logs stay on GitHub.
• Billing. Card payments are handled by Stripe. We receive the payment amount, status and Stripe identifiers, never your full card number. We keep a ledger of top-ups, holds and charges for each account.
• Operational logs. Our services log requests and events (for example IP address, time and request path) to operate, secure and debug the service.

Cookies

We set one cookie, dr_session, to keep you signed in for up to 8 hours. We use no advertising or analytics cookies and load no third-party trackers.

How we use it

To run your jobs, bill for them, show you your usage, prevent abuse, meet legal obligations, and contact you about your account. We do not sell or rent personal information, and we do not use it for advertising.

Who we share it with

Only the service providers that run the service: Google Cloud (hosting and runner VMs), GitHub (sign-in and job delivery), Stripe (payments) and Cloudflare (DNS). We may also disclose information when the law requires it or to protect the service and its users.

Retention

We keep account, job and ledger records while your account is active and as long afterwards as we need them for accounting, tax and legal purposes. Operational logs are kept for a limited period and then deleted.

Your choices and rights

You can uninstall our GitHub App or revoke its authorization in your GitHub settings at any time. You may ask us to access, correct or delete your personal information; California residents have these rights under the CCPA, and we will not discriminate against you for using them. Some records, such as ledger entries, must be kept for legal and accounting reasons.

Security

Runner VMs hold no cloud credentials, accept no inbound connections and run one job each. Secrets are kept in a managed secret store, and access to production is limited to the people and systems that need it.

Children

The service is for businesses and developers and is not directed at children under 16.

Changes

We will post changes here and update the date above. Material changes will be announced on this site before they take effect.

Contact