[{"data":1,"prerenderedAt":421},["ShallowReactive",2],{"content-en-privacy":3},{"id":4,"title":5,"body":6,"description":398,"extension":414,"meta":415,"navigation":416,"path":417,"seo":418,"stem":419,"__hash__":420},"content\u002Fen\u002Fprivacy.md","Privacy",{"type":7,"value":8,"toc":397},"minimark",[9,14,19,23,32,36,39,43,46,74,82,85,89,94,97,101,104,131,134,138,141,149,152,156,159,163,166,169,172,176,179,183,186,190,193,196,200,203,207,210,285,289,292,296,299,303,363,366,370,373,377,380,384,387,391],[10,11,13],"h1",{"id":12},"privacy-policy","Privacy Policy",[15,16,18],"h3",{"id":17},"data-privacy-declaration","Data Privacy Declaration",[20,21,22],"p",{},"The data controller in accordance with GDPR and other data protection laws is: Newmatik GmbH, Dominik Ottenbreit, Am Markt 1, 55619 Hennweiler,\nGermany",[20,24,25,26,31],{},"This policy covers the website gitscore.dev and the GitScore service, which Newmatik GmbH operates. The ",[27,28,30],"a",{"href":29},"\u002Fimprint","imprint"," lists our full company\ndetails.",[15,33,35],{"id":34},"the-short-version","The Short Version",[20,37,38],{},"GitScore ranks GitHub activity across repositories you choose. To do that it needs your GitHub sign-in and read access to those repositories. We only\ncollect the minimum amount of personal information that is necessary to provide the service; we don't sell it to third parties; we don't use\nanalytics or advertising trackers; and we only use your data as this Privacy Statement describes. We take protecting your data seriously.",[15,40,42],{"id":41},"your-rights-under-gdpr","Your Rights Under GDPR",[20,44,45],{},"As we operate under European data protection law (GDPR), you have several important rights that we want you to know about. You have the right to:",[47,48,49,53,56,59,62,65,68,71],"ul",{},[50,51,52],"li",{},"Access your personal data that we process",[50,54,55],{},"Correct any inaccurate data we might have about you",[50,57,58],{},"Request erasure of your personal data (\"right to be forgotten\")",[50,60,61],{},"Restrict how we process your data",[50,63,64],{},"Take your data with you to another service (data portability)",[50,66,67],{},"Object to how we process your data",[50,69,70],{},"Withdraw your consent at any time",[50,72,73],{},"Lodge a complaint with your local data protection authority",[20,75,76,77,81],{},"If you'd like to exercise any of these rights, just email us at ",[27,78,80],{"href":79},"mailto:service@newmatik.com","service@newmatik.com",". We're here to help!",[20,83,84],{},"These rights also apply if you never signed in to GitScore but contributed to a repository that a GitScore user scanned (see \"Scans and\ncontribution data\" below).",[15,86,88],{"id":87},"what-information-we-collect-and-why","What Information We Collect and Why?",[90,91,93],"h4",{"id":92},"visiting-the-website","Visiting the Website",[20,95,96],{},"GitScore runs on Cloudflare Workers. When you open gitscore.dev, Cloudflare processes your IP address and the request data your browser sends\n(requested page, date and time, browser type, language preference, referring site) to deliver the page and to protect the service against abuse.\nCloudflare Workers logs keep request metadata and the application's own log messages (for example a scan ID, a repository name and error messages)\nso that we can investigate errors.",[90,98,100],{"id":99},"signing-in-with-github","Signing In with GitHub",[20,102,103],{},"You sign in with your GitHub account. Sign-in runs through Supabase Auth, which redirects you to GitHub. GitScore asks GitHub for these\npermissions (OAuth scopes):",[47,105,106,113,119,125],{},[50,107,108,112],{},[109,110,111],"code",{},"read:user",": your public GitHub profile",[50,114,115,118],{},[109,116,117],{},"user:email",": your email address (Supabase Auth always requests it)",[50,120,121,124],{},[109,122,123],{},"read:org",": the organisations you belong to",[50,126,127,130],{},[109,128,129],{},"repo",": access to your repositories, including private ones. GitHub offers no read-only scope for private repositories; GitScore only reads\nfrom them and never writes to GitHub.",[20,132,133],{},"From your GitHub account Supabase Auth stores your user account: GitHub user ID, username, display name, email address and avatar URL, together with\nthe sign-in timestamps. GitScore copies your GitHub user ID, username, display name and avatar URL into its profile table.",[90,135,137],{"id":136},"your-github-access-token","Your GitHub Access Token",[20,139,140],{},"All GitHub requests are made by our server; your browser never receives the GitHub token. We store the token in our database so that scans keep\nworking after your browser session refreshes:",[47,142,143,146],{},[50,144,145],{},"one copy linked to your account, encrypted with AES-256-GCM. It is deleted when you log out of GitScore.",[50,147,148],{},"one encrypted copy for each running scan, which the background worker uses. It is deleted as soon as the scan has finished or failed.",[20,150,151],{},"You can also revoke GitScore's access at any time in your GitHub settings under Applications.",[90,153,155],{"id":154},"organisations-and-repositories","Organisations and Repositories",[20,157,158],{},"To show the organisations and repositories you can pick from, GitScore stores a list of them for your account (organisation login and avatar URL;\nrepository name, owner, and whether it is private or archived). The list is refreshed from GitHub when you load it again.",[90,160,162],{"id":161},"scans-and-contribution-data","Scans and Contribution Data",[20,164,165],{},"When you start a scan, GitScore stores the scan itself (selected organisation or repositories, date range, status, progress and any warnings) and\nreads the following activity of the selected repositories from GitHub: commits, issues, pull requests, reviews, issue and review comments, and\nthumbs-up reactions on comments.",[20,167,168],{},"GitScore stores this activity only as daily counts per contributor and repository: the contributor's GitHub username, the day, and the number of\ncommits, opened and closed issues, opened and merged pull requests, reviews, comments, thumbs-up reactions, and added and deleted lines, plus whether\nthe account looks like a bot. It does not store commit messages, issue or comment text or source code.",[20,170,171],{},"This means a scan also processes data about other people: everyone who contributed to the scanned repositories in the selected period, whether or\nnot they use GitScore. Only the user who ran a scan can see its results. When you open a contributor's detail page, GitScore loads their public\nGitHub profile (name, avatar, bio, company, location, website, number of public repositories and followers) live from GitHub and does not store it.",[90,173,175],{"id":174},"your-settings","Your Settings",[20,177,178],{},"GitScore stores your settings for your account: whether to hide contributors without activity, your default language, your scoring weights and time\nmodel, and the GitHub usernames you mark as bots.",[90,180,182],{"id":181},"error-monitoring-with-sentry","Error Monitoring with Sentry",[20,184,185],{},"We use Sentry to detect and fix errors in the browser and on the server. When an error occurs, Sentry receives the error message and stack trace,\nthe page address without query parameters, your browser's User-Agent (browser and operating system) and Referer headers, and for errors during a\nscan the scan ID and the repository name. We also send performance traces for a sample of 20% of requests. We have switched off the collection of\nuser details, cookies, other request headers, request and response bodies, query parameters, database queries and local variables. Sentry does\nnot record your sessions (no session replay). Our Sentry project stores its data in Sentry's EU region (Germany).",[90,187,189],{"id":188},"contacting-us","Contacting Us",[20,191,192],{},"When you reach out to us by email, we store the information you provide to handle your request and any follow-up questions. This typically includes\nyour name, email address, and the content of your message.",[20,194,195],{},"If we receive an email from you, we assume we can respond via email too. If you prefer a different communication method, just let us know!",[15,197,199],{"id":198},"legal-basis","Legal Basis",[20,201,202],{},"We process your account, token, repository, scan and settings data to provide GitScore to you (Article 6(1)(b) GDPR). We process request data,\nlogs and error reports based on our legitimate interest in running a secure and working service (Article 6(1)(f) GDPR).",[15,204,206],{"id":205},"our-use-of-cookies","Our Use of Cookies",[20,208,209],{},"GitScore uses only cookies that it needs to work. It does not use analytics, advertising or tracking cookies, so it does not ask for consent.",[211,212,213,229],"table",{},[214,215,216],"thead",{},[217,218,219,223,226],"tr",{},[220,221,222],"th",{},"Cookie",[220,224,225],{},"Purpose",[220,227,228],{},"Lifetime",[230,231,232,246,259,272],"tbody",{},[217,233,234,240,243],{},[235,236,237],"td",{},[109,238,239],{},"sb-…-auth-token",[235,241,242],{},"Keeps you signed in (Supabase Auth session)",[235,244,245],{},"8 hours",[217,247,248,253,256],{},[235,249,250],{},[109,251,252],{},"sb-…-auth-token-code-verifier",[235,254,255],{},"Secures the GitHub sign-in (PKCE)",[235,257,258],{},"Until sign-in completes",[217,260,261,266,269],{},[235,262,263],{},[109,264,265],{},"filters",[235,267,268],{},"Remembers the organisation you last selected",[235,270,271],{},"Until you close the browser",[217,273,274,279,282],{},[235,275,276],{},[109,277,278],{},"i18n_redirected",[235,280,281],{},"Remembers your language",[235,283,284],{},"1 year",[90,286,288],{"id":287},"managing-cookies","Managing Cookies",[20,290,291],{},"You can prevent cookies by adjusting your browser settings (look in your browser's Help section to find out how). Without the sign-in cookies you\ncannot log in to GitScore.",[15,293,295],{"id":294},"analytics","Analytics",[20,297,298],{},"GitScore does not use any web analytics.",[15,300,302],{"id":301},"service-providers-and-where-your-data-is-processed","Service Providers and Where Your Data Is Processed",[211,304,305,317],{},[214,306,307],{},[217,308,309,312,314],{},[220,310,311],{},"Provider",[220,313,225],{},[220,315,316],{},"Location",[230,318,319,330,341,352],{},[217,320,321,324,327],{},[235,322,323],{},"Cloudflare",[235,325,326],{},"Hosting (Workers), background scan queue (Queues), storage of the website's text pages (D1)",[235,328,329],{},"Cloudflare's global network",[217,331,332,335,338],{},[235,333,334],{},"Supabase",[235,336,337],{},"Sign-in (Supabase Auth) and database",[235,339,340],{},"EU (Frankfurt, Germany)",[217,342,343,346,349],{},[235,344,345],{},"Sentry",[235,347,348],{},"Error monitoring",[235,350,351],{},"EU (Germany)",[217,353,354,357,360],{},[235,355,356],{},"GitHub",[235,358,359],{},"Sign-in with GitHub and the source of the scanned data",[235,361,362],{},"USA",[20,364,365],{},"Your GitHub data comes from GitHub, which you use under GitHub's own terms and privacy statement.",[15,367,369],{"id":368},"international-data-transfers","International Data Transfers",[20,371,372],{},"Sometimes we need to transfer your data outside the European Economic Area (EEA). When we do, we make sure it's protected using approved methods like\nstandard contractual clauses or adequacy decisions.",[15,374,376],{"id":375},"data-security","Data Security",[20,378,379],{},"We take security seriously. We use encryption for data in transit, regularly assess our security, control who has access to data, and train our staff\nin data protection. GitHub tokens are stored encrypted, and database access is restricted so that each user can only read their own data.",[15,381,383],{"id":382},"updates-to-this-policy","Updates to This Policy",[20,385,386],{},"We review this privacy policy regularly and will post any updates here. This policy was last updated on October 14th 2026.",[15,388,390],{"id":389},"need-more-information","Need More Information?",[20,392,393,394,396],{},"If you have any questions about our privacy practices, we're happy to help! Just email us at ",[27,395,80],{"href":79}," or write to us at: Newmatik GmbH,\nAm Markt 1, 55619 Hennweiler, Germany.",{"title":398,"searchDepth":399,"depth":399,"links":400},"",2,[401,403,404,405,406,407,408,409,410,411,412,413],{"id":17,"depth":402,"text":18},3,{"id":34,"depth":402,"text":35},{"id":41,"depth":402,"text":42},{"id":87,"depth":402,"text":88},{"id":198,"depth":402,"text":199},{"id":205,"depth":402,"text":206},{"id":294,"depth":402,"text":295},{"id":301,"depth":402,"text":302},{"id":368,"depth":402,"text":369},{"id":375,"depth":402,"text":376},{"id":382,"depth":402,"text":383},{"id":389,"depth":402,"text":390},"md",{},true,"\u002Fen\u002Fprivacy",{"title":5,"description":398},"en\u002Fprivacy","x84Q4lf1k78lZxuYeAcC9vXm4HwhqzbwV7fvw5v-0aQ",1793466560015]