Privacy Policy
TL;DR: our server stores your GitHub login and a device push token — nothing else. No analytics, no ads, no selling of anything. Sign out and it's gone.
what the notification server stores
To deliver instant push notifications, the GsGit backend (api.gsgit.org) keeps exactly two values per device:
- your GitHub login — to know which events are yours;
- a device push token (FCM) — to know where to deliver them.
That is the complete list. No message contents, no repository data, no email, no IP logs kept beyond standard short-lived server logs.
what stays on your device
- Your GitHub App session tokens live only on the device, in hardware-encrypted storage. The app never uses personal access tokens.
- App preferences and caches stay local.
github data
Repository content, issues, pull requests and everything else are fetched from the official GitHub API on your behalf, directly from the device, and are never persisted server-side.
deleting your data
- Signing out (or disabling pushes) unregisters the device — the login/token pair is removed from the server.
- Revoking the GsGit App in your GitHub settings instantly cuts all API access.
third parties
Push delivery uses Google Firebase Cloud Messaging as the transport. The message payload contains only the notification text produced from public webhook data. There are no other third-party services, SDKs or trackers.
contact
Questions or requests: open an issue at github.com/lkolholk-ctrl/gsgit-releases/issues.