internal/web/templates/privacy.html

 1{{define "title"}}privacy · {{.Site}}{{end}}
 2{{define "content"}}
 3<div class="landing">
 4<h1>Privacy</h1>
 5
 6<h2>The software</h2>
 7<p>This site runs <a href="https://gitbay.org/krz/gitbay">gitbay</a>, a
 8self-hosted, CLI-first git forge. The software makes no external
 9requests from your browser: no analytics, no CDNs, no webfonts, no
10tracking of any kind. Everything you see is served from this host.</p>
11<p>What the server stores is what a forge needs to function: your
12account (username, email addresses, public SSH/PGP keys), the
13repositories and their contents, issues, merge requests, comments, and
14a security audit log of account and repository actions (recording the
15acting user, the action, and the public key fingerprint used). Web
16sessions use a single cookie, only after you log in. Private
17repositories are visible only to accounts you grant; to everyone else
18they are indistinguishable from nonexistent.</p>
19<p>Your data is portable by design: <code>gitbay auth export</code>
20downloads your account bundle, git data is yours by clone, and
21<code>gitbay migrate</code> moves everything to another instance.</p>
22
23<h2>The mobile client</h2>
24<p>The iOS app is a client for an instance you name at sign-in. It has
25no account of its own, no sign-up, and no server of ours behind it: it
26speaks only to that instance, over HTTPS.</p>
27<p>Signing in stores one API token in the device Keychain. Which account
28is active is kept in app preferences; nothing else is retained on the
29device. The app embeds no analytics, no crash reporting, and no
30third-party SDK, so there is nothing to opt out of. Removing the account
31deletes the token from the Keychain.</p>
32<p>Tokens are minted over SSH and can be revoked at any time with
33<code>gitbay auth token revoke</code>, which ends the app's access
34immediately.</p>
35
36<h2>This instance ({{.Host}})</h2>
37{{if .Notice}}{{range paragraphs .Notice}}<p>{{.}}</p>{{end}}
38{{else}}<p class="desc">The operator of this instance has not added
39instance-specific notes. Questions about backups, retention, or
40jurisdiction go to the operator.</p>{{end}}
41</div>
42{{end}}