Privacy

Six things, and they all arrive either from the GitHub sign-in or from something you did in the app. There is no profile to fill in, no name beyond the one GitHub publishes, and no field that asks you anything else.

account id

the identifier the sign-in creates, which every row below is keyed by

email address

from GitHub, so the account can be recognised and reached

github name and picture

from GitHub, shown in the top bar and nowhere else

technologies followed

which ones, and the day each was followed

versions declared

the version you say you are on, and the day you said it

plan

Free, for every account

You can read your own copy of that list, filled in with your rows, on the account page.

The summaries are written by a language model, and the model is never told who you are. The job that writes them runs on the server, on a schedule of its own, and reads one thing: the release notes a project published. It does not know which technologies anyone follows, and a summary is the same text for every reader, written once and stored.

The browser never talks to a third party either. The GitHub picture is served through our own image optimizer, so your browser asks this site for it rather than asking GitHub.

GitHub authenticates the sign-in and hands over your public profile and email address. It has no access to this app’s data, and this app has no access to your repositories.

Supabase runs the database and the sessions: the six rows above live there.

Vercel hosts the app, so it serves every request and keeps the request logs that come with doing so, and it counts page views through Vercel Analytics.

Anthropic provides the model that writes the summaries, from public release notes alone, as above.

There is no consent banner on this site because there is nothing to consent to: no advertising, no profiling, and no third party setting anything in your browser.

Signing in sets session cookies, which are what keeps you signed in from one page to the next; signing out or deleting the account clears them. The theme you pick is kept in your browser’s local storage, not in a cookie, and never leaves the browser. Vercel Analytics counts page views without a cookie and without storing an identifier in your browser: what it produces is counts of pages, not a trail of a person.

Everything above is kept while the account exists. Deleting the account on the account page removes it at once: the account row goes, and the follows, the declared versions and the plan go with it, because they are keyed to it and deleted with it. There is no grace period, no archive of ours, and nothing to undo it with.

What stays after that is outside the account: the catalog, the releases and the summaries, none of which were ever yours or about you. The providers above run their own backups and logs on their own schedules, which we neither control nor can delete from.

One address, answered by the person who runs this: robertozeppilli@proton.me. Ask what is held about you, ask for it to be deleted, or tell us something here is wrong.