Privacy

Effective 24 October 2026. Plain language, no lawyer tricks.

Scanning your repos

RepoGrade reads public GitHub metadata only: repository basics, the file tree, README, CHANGELOG and package.json via the public API, plus latest release info. Nothing is uploaded to any server we own; scans happen on your machine. If you set GITHUB_TOKEN, it is used only for that request from your own environment.

This website

• No analytics, no cookies, no fingerprinting, no localStorage.
• GitHub Pages logs standard request data (IP, user agent) under GitHub's privacy statement.
• The page loads its stylesheet and fonts locally; no third-party font CDN is used on this site.

The free repo review form

The form sends your email and message through FormSubmit to meetcode99@gmail.com. We use it only to process and reply to your request. We do not sell, share or add you to a drip campaign. Ask for deletion at the same address and it is gone within a few days.

Reports

Report artifacts (report.json/md/html) are written locally by the CLI. If you publish them on your own site, that is your call — sample reports in this repo are real scans of public repos, published under a correction policy (open an issue or email us and we act within a day).