{{define "title"}}privacy · {{.Site}}{{end}}
{{define "content"}}
<div class="landing">
<h1>privacy</h1>

<h2>the software</h2>
<p>This site runs <a href="https://gitbay.org/krz/gitbay">gitbay</a>, a
self-hosted, CLI-first git forge. The software makes no external
requests from your browser: no analytics, no CDNs, no webfonts, no
tracking of any kind. Everything you see is served from this host.</p>
<p>What the server stores is what a forge needs to function: your
account (username, email addresses, public SSH/PGP keys), the
repositories and their contents, issues, merge requests, comments, and
a security audit log of account and repository actions (recording the
acting user, the action, and the public key fingerprint used). Web
sessions use a single cookie, only after you log in. Private
repositories are visible only to accounts you grant; to everyone else
they are indistinguishable from nonexistent.</p>
<p>Your data is portable by design: <code>gitbay auth export</code>
downloads your account bundle, git data is yours by clone, and
<code>gitbay migrate</code> moves everything to another instance.</p>

<h2>this instance ({{.Host}})</h2>
{{if .Notice}}{{range paragraphs .Notice}}<p>{{.}}</p>{{end}}
{{else}}<p class="desc">The operator of this instance has not added
instance-specific notes. Questions about backups, retention, or
jurisdiction go to the operator.</p>{{end}}
</div>
{{end}}