Privacy policy

1. Who we are

GamaLab is a free, open-source (MIT) desktop Postgres client, distributed through GitHub Releases. This policy covers both the desktop app and this website (gamalab.dev). Because the app is open source, every claim below can be verified in its source code.

2. The short version

GamaLab is local-first. We do not run a backend, we do not collect telemetry or crash reports, and we have no access to your databases. The desktop app does not require an account. The only time data leaves your machine for a third party is when you opt in to the AI assistant — see Section 4.

3. What the desktop app collects

Nothing. The app stores your connection profiles, queries, and preferences locally on your machine. Connection credentials and API keys are encrypted at rest via the OS keychain (DPAPI on Windows).

The app does not phone home or check for updates on its own — new versions are downloaded manually from GitHub. Downloads from GitHub are governed by GitHub's privacy statement.

4. The AI assistant

The AI assistant is optional and uses your own API key (Anthropic or OpenAI). When you ask it to translate a natural-language prompt into SQL, GamaLab sends the request directly to the provider you chose — there is no GamaLab proxy in between. The request contains:

• Your prompt (the text you typed).
• The structure of the relevant tables (column names and types — never row data).

We do not see, log, or store these requests. Their handling is governed by the privacy policy of the provider whose key you configured.

5. The website

gamalab.dev uses Plausible Analytics — a cookieless, privacy-preserving analytics service. No personal data, no cookies, no cross-site tracking. The data collected is aggregated traffic metrics only.

No advertising trackers, no third-party social pixels.

6. Sharing

We do not sell, rent, or share personal data with third parties. The only providers that touch your data are:

• GitHub (source code hosting and release downloads).
• Plausible Analytics (website traffic, no PII).
• The AI provider whose key you configure in the assistant (only the data you send to it).

7. Your rights

Under the GDPR (EU/EEA users) and similar laws, you may request access to, correction of, or deletion of any personal data we hold. Because the app does not collect personal data by default, in most cases there is nothing on our side to delete. For website analytics, the data is already aggregated and not tied to you.

Reach us at contact@gamalab.dev for any privacy request.

8. Children

GamaLab is not directed at children under 13. We do not knowingly collect personal data from children.

9. Changes

We will update this page when our practices change and revise the effective date above. Material changes will be flagged in the app or on this site.

10. Contact

Questions about this policy? contact@gamalab.dev.