Blast

Privacy Policy

Last updated: February 2025

Overview

Blast is a developer activity tracking service. This privacy policy explains what data we collect, how we use it, and your rights regarding your data.

Important: The data collection tools (blastd and blast.nvim) are fully open source. You have complete visibility into what data is collected and transmitted, and you can configure exactly what information is sent to our servers.

Data We Collect

Account Information

When you sign in with GitHub, we receive and store:

  • Your GitHub username
  • Your display name
  • Your profile picture URL
  • Your email address

Activity Data

When you use Blast to track your coding activity, the blastd daemon collects and sends:

  • Time spent coding (start and end timestamps)
  • File types/languages you're working with
  • Project names (based on directory names or git remotes)
  • File paths within projects
  • Git branch names
  • Lines of code added/removed
  • Editor information (Neovim)
  • Machine identifier (hostname)
  • Vim-specific metrics (actions per minute, words per minute)

See the exact payload format →

Your Control Over Activity Data

Because blastd is open source, you have complete control over what data is collected and sent:

  • Private projects: You can mark projects as private in your blastd config. Time will still count toward your totals, but project details won't be revealed.
  • Inspect the code: Both blastd and blast.nvim are open source. You can audit exactly what data is collected and transmitted.
  • Local storage: blastd maintains a local SQLite cache. You can inspect this database at any time.
  • Selective sync: Data is only sent when blastd is running and connected to the internet.

How We Use Your Data

  • Public leaderboard: If your profile is public, your username, profile picture, total coding time, and top language appear on the leaderboard.
  • Personal statistics: We aggregate your activity data to show you insights about your coding habits.
  • Service operation: We use your data to provide and improve the Blast service.

Data Sharing

We do not sell your data. We may share data in these situations:

  • Public profile: If you opt in to the public leaderboard, your username, profile picture, total time, and top language are publicly visible.
  • Legal requirements: We may disclose data if required by law.

Data Retention and Deletion

We retain your data for as long as your account is active. You can delete your account at any time from the Settings page. When you delete your account:

  • All your activity history is permanently deleted
  • All your projects and their data are deleted
  • All your API tokens are invalidated
  • Your profile is removed from the leaderboard

Account deletion is immediate and irreversible. We do not retain backups of deleted user data.

Security

We implement reasonable security measures including:

  • Encrypted connections (HTTPS) for all data transmission
  • Hashed API tokens (we never store raw tokens)
  • Database hosted on secure cloud infrastructure

Third-Party Services

We use the following third-party services:

  • GitHub: For authentication
  • Vercel: For hosting and analytics
  • Neon: For database hosting

Open Source Transparency

While the Blast web service is not open source, the data collection components are:

  • blastd — The daemon that collects and syncs activity data
  • blast.nvim — The Neovim plugin that tracks editor activity

This means you can verify exactly what data is being collected before it ever leaves your machine.

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via the website.

Contact

For privacy-related questions, please open an issue on our GitHub repository.