Privacy Policy

1. Introduction & Data Controller

The protection of your personal data is important to us. We process your data solely on the basis of applicable law (GDPR, Austrian Telecommunications Act 2003).

2. What Data We Collect

A. GitHub Data (OAuth)

When you sign in with GitHub, we receive access to the following data based on your authorization (Art. 6 para. 1 lit. b GDPR):

• Public profile data: Username, avatar, bio, location.
• Repository metadata: Names, languages, stars, forks, creation date.
• Commit statistics: Timestamps and file sizes for calculating your score.

B. Private Repositories (Pro Feature)

If you upgrade to Pro and connect private repositories, we also analyze their metadata (timestamps, languages). The content of your private files is never read, downloaded, or stored.

C. Server Logs

For technical reasons (security, troubleshooting), our hosting provider stores access data (IP address, browser, timestamps) in log files (Art. 6 para. 1 lit. f GDPR).

3. Cookies, Tracking & Privacy-First Analytics

Cookies and Tracking

This website does not use cookies, local storage, tracking pixels, or any comparable technologies that store or access information on your terminal device (§ 25 para. 1 TTDSG / TDDDG). Consequently, no prior consent via a cookie banner is required to use this site.

Privacy-First Analytics

To improve our service, we use DataFast, a privacy-friendly, server-side analytics system.

• No Identification: We do not store any personal data (such as full IP addresses) that would allow the identification of individual visitors.
• Anonymization: Data processing is performed exclusively on an anonymous, aggregated basis.
• Legal Basis: This processing is based on our legitimate interest in the functional design and optimization of our website pursuant to Art. 6 para. 1 lit. f GDPR.

4. Payment Processing & Subscriptions (Lemon Squeezy)

We use Lemon Squeezy as our reseller (Merchant of Record). This means:

• The contract of sale is between you and Lemon Squeezy.
• Lemon Squeezy is responsible for processing payments and the correct handling of taxes (VAT/Sales Tax).
• We do not store credit card data. It is processed solely by Lemon Squeezy.

Subscription-related data

When you subscribe to GitPulse Pro (recurring billing), we process subscription-related data for the performance of the contract (Art. 6 para. 1 lit. b GDPR):

• Subscription status: Whether your subscription is active, cancelled, or expired; subscription and order identifiers.
• Billing cycle: Renewal dates and billing interval (e.g. monthly or yearly).
• Webhook data: Our systems receive events from Lemon Squeezy (e.g. subscription created, renewed, cancelled, or payment failed) so we can grant or update your Pro access. We store only the data necessary for access control and support.

We retain subscription-related data for as long as your subscription is active and, where required by law (e.g. tax and commercial law), for the applicable statutory retention period thereafter.

Service provider: Lemon Squeezy, LLC, 222 South Main Street Suite 500, Salt Lake City, UT 84101, USA.
Lemon Squeezy Privacy Policy

5. Hosting & Infrastructure

Our infrastructure runs on servers of trusted providers. We have concluded Data Processing Agreements (DPA) with all providers.

• Hosting & Frontend: Vercel Inc. (USA).
  • We deploy our application logic to the EU (Frankfurt) region.
  • However, Vercel utilizes a global Content Delivery Network (CDN) for performance, meaning encrypted data may be routed through servers worldwide.
  • Vercel is certified under the EU-US Data Privacy Framework (DPF).
• Backend: Render (Server location: Frankfurt, Germany).
• Database: Supabase / Neon (Server location: Frankfurt, Germany).

Transfers to third countries (e.g., USA) are safeguarded by the Data Privacy Framework (DPF) or Standard Contractual Clauses (SCC).

6. Your Rights

You have the right at any time to access, rectify, delete, and restrict the processing of your stored data.

You can delete your account and all associated data at any time directly in your profile settings. If you have questions, please contact us at [email protected].