Privacy policy

Summary

• Your code host credentials stay on your device.
• We never receive your source code, diffs, or build logs.
• Analytics and crash reports are off unless you turn them on.
• No advertising SDKs. We do not sell data.
• Deleting your account removes our server-side records within 30 days.

Data on your device

Access tokens for Bitbucket, GitLab, GitHub, Gitea, and Forgejo are stored in the iOS Keychain or the Android Keystore. On iOS they are marked as available only on this device, so they are not copied to other devices or included in backups. On Android, credential files are excluded from cloud backup.

The app keeps a local cache of lists and metadata, such as pull request titles and pipeline statuses, so screens load quickly. Source code is cached only for the file you have open, and you can purge it. Signing out of an account clears its cache.

Secured pipeline variables are never cached, never logged, and never included in analytics or crash reports. The app blurs its snapshot in the app switcher.

Data the push relay handles

If you use our hosted relay, it stores your device push tokens, your subscription filters (which accounts, repositories, and event types you follow, and your quiet hours), and the webhook secrets for the repositories you enabled. It does not store source code, diffs, or logs. Webhook event bodies are processed in memory and discarded after delivery. See how push works for details.

Notifications are delivered by Apple and Google. Once private mode is available, notification content is encrypted to a key held only on your device, and Apple, Google, and the relay see only that a notification was sent.

If you run your own relay, the event data stays with you. Our push gateway receives a device token and an encrypted payload it cannot read.

Analytics and crash reports

Both are opt-in. When enabled, they exclude repository names, branch names, and any text content, and never include pipeline variables or logs. You can turn them off at any time in the app's settings.

This website

The site sets no cookies and loads nothing from third-party domains. Your light or dark theme choice is saved in your browser's local storage and never sent to us.

Our request logs record the time, page path, response status, a request ID, and the Cloudflare data center that served you. They do not record your IP address or your full browser user agent. Cloudflare, which hosts the site, processes IP addresses to deliver traffic and protect against abuse, under its own privacy policy.

Who else receives data

• Cloudflare, which hosts this site, the relay, and the push gateway.
• Apple and Google, which deliver push notifications and process app store purchases.
• Your code hosts, which the app talks to directly from your device using your own credentials.

We do not sell personal data or share it for advertising.

Deleting your data

Deleting your Source Pocket account removes your relay registrations and our server-side records within 30 days, and sooner on request. Signing out of a single provider account in the app removes that account's credentials, cache, and relay registration right away.

To ask for deletion of any record, email privacy@sourcepocket.com from the address concerned.

Changes

When this policy changes, we will update the date at the top of this page. Material changes will be announced in the app before they take effect.