Privacy

What we collect

Nothing. The app has no analytics SDK, no usage pings, no unique identifier, and no sign-in. We do not know who you are, how many people use it, or which features get used.

Your repositories, file contents, diffs, commit messages and branch names never leave your machine. The app reads them locally, and that is the whole of it.

The only two things it contacts

The app makes exactly two kinds of outbound request, both of them visible in the source and both of them for you rather than about you:

1. The update check. It asks GitHub for the latest release version. That request tells GitHub your IP address, as any HTTPS request does. It sends no identifier of any kind, and you can turn it off in Settings → Updates.

2. Pull requests, if you set them up. If you add a GitHub or GitLab token, the app talks to that forge's API on your behalf — the same API your browser uses. If you never add a token, this never happens.

Your tokens and passwords

Git credentials are handled by your operating system's credential helper, and forge tokens are stored in your OS keychain. Neither is sent anywhere except to the host it belongs to, and no part of the app's own interface can read a token back out.

Secrets are passed to git through the environment, never as command-line arguments — arguments are readable by any other process on the machine.

Why you can check rather than trust

This page is not a promise, it is a description of something the build enforces. The test suite fails if an analytics dependency appears in either dependency tree, if the interface code makes any network call at all, or if a new hostname is compiled in without a written justification.

That means the claims above cannot quietly stop being true: breaking one breaks the build. The code is GPLv3, so you can also just read it.

Where the app stores things

Settings, your open repositories and the app log live in the standard per-user application data directory for your operating system. Nothing is written outside your own user account, and uninstalling removes the app.

Questions

If something here is unclear or looks wrong, open an issue — privacy questions are answered in public, where the answer is useful to everyone.