Privacy

[tldr] reposcan runs entirely in your browser. We collect nothing. We store nothing. We share nothing.

Data we collect

None. There's no backend to receive anything.

Cookies

None. Open your DevTools and check — the Application tab is empty.

Analytics

None. No Plausible, no Google Analytics, no Posthog, no custom pixels.

Third-party requests

When you run a scan, your browser hits api.github.com directly. That request is subject to GitHub's privacy policy, not ours. Fonts are loaded from fonts.googleapis.com; if you'd rather not, run reposcan self-hosted with the fonts bundled.

Changes

If this ever changes, we'll bump the version at the bottom and call it out in the changelog.

policy version: 2.1.0 · last updated: 2026-06-10