Privacy Policy

Last updated: June 2026

At RepoStats, your data privacy and control are paramount. This policy documents how we handle repository references, process data via the GitHub API, and secure authentication tokens.

1. Data Handling

Our platform processes the following scope of information to generate analytics dashboards:

  • GitHub repository URLs: Entered directly by users to target metric evaluations.
  • GitHub API responses: Information retrieved from public scopes, including contributor activity, commit frequencies, and pull request data.
  • GitHub Personal Access Tokens: Processed temporarily to authenticate authorized API operations.

2. Token Handling (Important)

When utilizing a GitHub Personal Access Token (PAT) to analyze metrics or mitigate rate limiting limits, security is strictly managed:

  • No Persistent Storage: Tokens are NOT stored or cached anywhere on our systems.
  • In-Memory Processing Only: Tokens are processed strictly in-memory during active client API communications and are cleared upon closing the session.
  • Explicit Storage Restrictions: Tokens are guaranteed to never be saved or recorded inside:
    • localStorage
    • cookies
    • database storage structures
    • application server logs