Privacy Policy

Last updated: April 2026

GitTeam ("the Service") respects user privacy and complies with applicable data protection regulations. This policy explains what data we collect, how we use it, and how long we retain it.

1. Information We Collect

• GitHub OAuth login: GitHub numeric user ID, username, avatar URL, public profile URL
• Service usage: Reviews, votes, reports, favorite repos, and feedback you submit
• Automatic collection: IP address (rate limit and bot defense), User-Agent header (debugging feedback submissions), session cookies

2. Purpose of Use

• Account identification and authentication
• Attributing user-generated content (reviews, feedback)
• Abuse prevention (rate limit, bot defense, moderation)
• Service improvement and debugging

3. Retention Period

• Account data: Deleted immediately upon account closure. Review bodies are preserved as "deleted user" for community history.
• Moderation records: Retained with immutable GitHub user ID to prevent re-registration abuse.
• Auto-collected logs: Up to 30 days for rate-limit/security purposes, then automatically purged.

4. Third-Party Sharing

We do not share personal information with third parties except as required by law.

5. Processors

We rely on the following sub-processors:

• Supabase — database and authentication
• Vercel — hosting, Web Analytics, Speed Insights
• Upstash — rate-limit counters
• Cloudflare Turnstile — bot defense challenge
• Sentry (optional) — error reporting
• Anthropic Claude (optional) — AI repo analysis (no personal data sent)
• GitHub — OAuth authentication and public API

6. Your Rights

• Request access, correction, deletion, or restriction of processing
• Delete your account from the profile page; account data and favorites are removed immediately.
• Review bodies remain visible as "deleted user" after account closure; they can only be deleted while the account is active.

7. Cookies

We use authentication cookies (Supabase), a bot-verification cookie (Turnstile, 30 days), and a locale preference cookie (NEXT_LOCALE). Blocking cookies may limit some features.

8. Contact

For privacy-related inquiries please use the in-app feedback form. Submissions are visible to admins only.

9. Changes

Material changes will be announced in-app and reflected by updating the "Last updated" date.