Privacy policy
Last updated
What we collect
- Repository views (browser extension)
- When you open a GitHub repo with the gitdebt extension installed, it sends us {owner, repo, observed star count}. We use this to keep a repo's data fresh and to find popular repos worth charting. The star count is an untrusted hint compared against our cache — it is never stored. The extension is anonymous: no account, cookie, or identifier is attached.
- Public repository data
- We fetch and cache public GitHub data — stargazer timestamps, commit history, contributors, language lines, and similar metadata — to render star-history and repo-debt charts. We only ever read public data.
- Optional GitHub sign-in
- If you choose to sign in, GitHub gives us your public profile identity and an OAuth token. We store the token encrypted at rest and use an HTTP-only signed session cookie to keep you signed in. Sign-in currently provides a one-click link to your profile-wide report; public repository reports do not require it. We do not request private-repository, write, or account-management access.
- Operational logs
- Our hosting providers and server may process request metadata such as IP address, user agent, route, timestamp, and response status to operate, secure, and troubleshoot the service. We do not use this data for advertising.
How we handle it
- We don't sell your data
- gitdebt does not sell, rent, or trade personal data to anyone, and we don't run third-party advertising or analytics trackers.
- Public data only
- Every repo signal we compute comes from publicly available GitHub data. We never request private-repo, write, or account-management permissions.
- Minimal retention
- Cached public repo data is kept to serve charts quickly and refreshed over time. The extension's reported star counts are discarded after comparison and never persisted. Signing out clears your browser session; you can ask us to remove the stored OAuth record by opening a private security advisory.
Your choices
gitdebt does not require an account. You can sign out at any time from the header menu. To stop the browser extension from sending repository views, turn off its automatic panel or uninstall the extension.
Contact
Questions about this policy? Open aGitHub issuewithout including private information. Report vulnerabilities through GitHub's private security advisory flow. gitdebt is an independent tool and is not affiliated with, endorsed by, or sponsored by GitHub.