Privacy & permissions
What the desktop app, optional automation service, and this website handle.
01 / Desktop app
Browsing and editing requests go directly from GitStride to GitHub. Desktop OAuth requests repo project read:org offline_access. The repo scope includes code read/write and private repository access; it is broader than board-only permissions.
OAuth access and refresh tokens stay in macOS Keychain. CLI credentials are read into memory, not copied into GitStride’s persistent storage.
Display preferences and a rebuildable Project snapshot are stored locally. Snapshots may contain private Project and Issue information and are not encrypted. They are restored only after confirming the account identity, and removed when disconnecting or switching connections.
02 / Optional automation service
When enabled, the Worker processes GitHub webhooks and API responses to locate and update matching Project items. The default hosted service is operated by zwyyy456 on Cloudflare Workers. A custom service can be selected in the app.
The service stores account and installation identifiers, repository identities, mapping and connection settings, encrypted OAuth credentials, and delivery status records. It does not persist or log private Issue titles/bodies or complete webhook payloads. Desktop management tokens stay in Keychain; the service stores their hashes.
Terminal delivery records become eligible for cleanup after 30 days. Expired setup sessions are reclaimed by daily maintenance after one day past expiry. Deleting a connection removes unused credentials and installation/account records, but active setup-session references may delay deletion. Cloudflare infrastructure logs and backups have separate retention rules.
03 / Disconnecting and revoking access
Disconnecting desktop OAuth removes GitStride’s local credentials. To revoke the grant at GitHub, use Authorized OAuth Apps. Desktop and automation use different OAuth Apps.
Deleting an automation connection stops future processing, not earlier status changes. Revoke its OAuth authorization and uninstall its GitHub App to fully remove the corresponding GitHub access. Changing the local service address does not stop the old service.
04 / App updates
The GitHub Release build uses Sparkle to check the repository update feed and downloads releases from GitHub. Automatic checks can be controlled in Settings. The App Store build uses store updates and does not include Sparkle; this build target does not establish store availability.
05 / This website
This source version includes no analytics SDK, advertising pixels, tracking cookies, contact form backend, or GitHub login. Product screenshots are static images. The automation illustration operates locally in your browser and does not call GitHub APIs. Fonts and assets are served locally.
When hosted on Vercel, hosting infrastructure may process request metadata, including network and browser information. Following an external GitHub or Cloudflare link is subject to that service’s policies. Adding analytics or another service requires updating this page.
Source and contact
For implementation details, read the repository README and Worker guide. Use the support page for questions.