Privacy policy
Last updated: 14 November 2026
The desktop app keeps everything on your computer. We receive nothing from it.
This website has no accounts, no cookies and no analytics.
pyhttp on the web (app.pyhttp.com) needs an account. We store your name, email address and profile picture from GitHub or Google, and what you save in the app. We do not sell it, show ads or use it for anything except running the service for you.
Who we are
pyhttp is made and operated by the pyhttp Dev Team. For anything about your data, write to dev@pyhttp.com. We are the party responsible for the data described here.
The desktop app
Your requests, environments, variables, cookies, history and responses are stored in files on your own computer. The app has no telemetry, no crash reporting and no account. It contacts only:
- the addresses you send requests to;
- GitHub, to check whether a newer version exists and to download it (you can switch the check off in Settings);
- a webhook address, if you set one for a monitor;
- your own Git remote, if you turn on Git sync.
Those services see your IP address, as any server you connect to does. We do not.
This website (pyhttp.com)
The site sets no cookies and runs no analytics or advertising scripts. It is delivered by Cloudflare, which, like any web host, processes your IP address and browser details to deliver pages and to protect the site from abuse. Download buttons lead to files hosted on GitHub.
pyhttp on the web (app.pyhttp.com)
What we collect
| Data | Where it comes from | Why we need it |
|---|---|---|
| Name, email address, profile picture and the account's id at the provider | GitHub or Google, when you sign in | To create your account, recognise you when you return, and show who is signed in |
| What you create in the app: requests, folders, environments, variables, mock servers, monitors, cookies, history and the responses to requests you send | You | To show it to you again, and to send the requests you ask for |
| Sign-in sessions: time of sign-in, expiry and browser type | Your browser | To keep you signed in for up to 30 days |
| Technical logs: IP address, time, the address requested and the result | Your browser | Security, preventing abuse and fixing faults |
We never receive or store your GitHub or Google password. Signing in gives us only the profile details above; we do not read your repositories, emails, contacts, files or anything else in those accounts.
How we use data from Google and GitHub
- Only to sign you in and to label your account with your name, email address and picture.
- We do not sell it, share it for advertising, or use it to build profiles.
- We do not use it, or anything you store in pyhttp, to train AI or machine-learning models.
- People on our team look at it only when needed to operate the service, to fix a problem you report, for security, or when the law requires it.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Requests you send
On the web, the requests you send are made from our server, not from your browser. The API you call sees our server's IP address, and we process the request and its response in order to send it and show you the result. Anything you put into a request, including tokens and passwords, is stored with that request. Do not store credentials in pyhttp on the web that you are not allowed to keep with a third party.
Cookies
app.pyhttp.com uses only cookies the service needs to work: one that keeps you signed in, a short-lived one that protects the sign-in step, and one that remembers an invitation to the preview. There are no advertising or tracking cookies. Display preferences such as the theme are kept in your browser's local storage.
Where it is kept and who helps us run it
| Provider | What it does for us | Location |
|---|---|---|
| Cloudflare | Delivers the site and the app and shields them from attacks | Worldwide network |
| Google Cloud (Firestore) | Stores accounts, sign-in sessions and what you save in the app | Mumbai, India |
| Oracle Cloud | Runs the server that works with your data and sends your requests | India |
| Amazon Web Services (S3) | Stores run results, large request and response bodies, and encrypted backup copies | Mumbai, India |
| GitHub and Google | Confirm who you are when you sign in | As chosen by them |
These companies process data on our instructions and for these purposes only. If you use pyhttp on the web from outside India, your data is transferred to and stored in India.
How long we keep it
- Your account and what you saved: until you delete it or ask us to delete your account.
- Sign-in sessions: 30 days, or until you sign out.
- Backups: 30 days. Something you delete disappears from the service at once and from the last backup that contains it 30 days later.
- Technical logs: only as long as needed for security and troubleshooting.
Security
Connections are encrypted with HTTPS. Sessions are stored as one-way hashes, so a copy of our database cannot be used to sign in as you. The server that stores your data accepts connections only through our own network edge. No system is perfectly secure; if a breach affects your data, we will tell you.
Your choices and rights
- See or export what you stored: use Export in the app, or ask us.
- Correct your name, email address or picture: change it at GitHub or Google and sign in again.
- Delete your account and everything in it: open the account menu in the app (your name, top right) and choose Delete account. It is removed at once; backup copies follow within 30 days. You can also write to dev@pyhttp.com from the account's email address.
- Withdraw access: remove pyhttp in your Google or GitHub account settings at any time.
Depending on where you live, the law may give you further rights over your data, such as objecting to its use or complaining to a data protection authority. Write to us and we will help.
Children
pyhttp is a tool for software developers and is not directed at children under 16. We do not knowingly collect their data.
Changes
When this policy changes we update the date at the top, and for changes that matter we tell signed-in users in the app or by email before they take effect.
Contact
pyhttp Dev Team · dev@pyhttp.com