Privacy

Last updated 6 November 2026

GitDoco has no account, no cookies, no analytics and no server of its own. It runs in your browser, which talks directly to the services listed below, only when you use a tool.

1. What GitDoco collects

Nothing. There is no GitDoco server or database, so nothing you load, select, type or copy reaches us. There are no cookies, analytics, tracking pixels, advertising or third-party scripts, and the site loads no fonts, images or scripts from other websites.

2. Which services your browser contacts

When you use a tool, your browser connects directly to these services. Like any website, they receive your IP address and the details of the request. Opening a page contacts neither, except a GitDoco link that names a repository (for example gitdoco.timedoco.com/owner/repo/issues), which starts loading that repository; the notice before your first request still comes first.

• GitHub (api.github.com, raw.githubusercontent.com): to read the repository, issues, discussions and files you ask for. If you enter a GitHub token, it is sent only to api.github.com. GitHub's handling of this is covered by the GitHub Privacy Statement.
• deps.dev (api.deps.dev, run by Google), Dependencies tool only: the names and versions of the packages in the repository, to look up their licenses and known advisories. For a private repository this includes the names of its internal packages. See Google's Privacy Policy.

Local .zip files are read in your browser and never uploaded. Your browser does not send these services the address of the GitDoco page you are on (no Referer header), and it sends no cookies to them.

3. What stays in your browser

Your GitHub token is kept only in the page's memory: it is never saved, and it is gone when you close or reload the tab.

To save you setting things up each visit, GitDoco keeps these in your browser's local storage, on your device only:

• Your settings: target AI, output format, split size, secret hiding, comment and dependency options, and theme.
• The license policy you set in the Dependencies tool (which licenses to allow, review or block, and approved packages). A .gitdoco-policy.json read from a repository is used for that load only and is not saved.
• Instructions you type for the AI in each tool.
• The last public repository you loaded (not one loaded with a token, and not a private one).
• That you accepted the notice shown before your first request, so it is not shown every time.

4. Links to other sites

Links to GitHub, package registries, deps.dev and advisory databases open in a new tab without telling the site which GitDoco page you came from. Once there, that site's own privacy policy applies.

5. Hosting

GitDoco is a static website served by a hosting provider and its content delivery network. Like all web servers, they automatically log standard request details (such as IP address, browser type and the page requested) to deliver the site and protect it from abuse. GitDoco does not use these logs to identify or profile you.

6. Content you load

Repository content is untrusted: code, issues and comments can contain text written to steer an AI. Review what you copy before you paste it into an AI service, whose own terms and privacy policy then apply.

7. What GitDoco cannot control

GitDoco can promise what its own pages do. It cannot control what other parties do with the data they receive:

• GitHub and deps.dev / Google receive your IP address and what you look up, and may log, analyse or keep it under their own policies.
• AI services you paste output into receive that content under their own terms; some may use it to train models unless you opt out.
• The hosting provider keeps standard access logs, as described in section 5.
• Your browser, its extensions and your network (for example a workplace proxy) can see the pages you use and what you type.
• Sites you open from links apply their own tracking and policies once you arrive.

For sensitive work, consider loading a local .zip instead of a GitHub URL, and check what you share with an AI service.

8. Changes to this notice

If GitDoco ever adds analytics, advertising or anything else that changes how data is handled, this notice will be updated first, and you will be asked for your consent before any of it runs where the law requires that. The tools will also ask you to accept the updated notice before they next connect to another service.

9. Questions

Open an issue on GitHub. GitDoco is open source under the MIT License, so you can check all of the above in its code.