{{define "width"}}bounded{{end}}
{{define "title"}}privacy · {{.Site}}{{end}}
{{define "content"}}
<div class="landing">
<h1>Privacy</h1>

<h2>The software</h2>
<p>This site runs <a href="https://gitbay.org/krz/gitbay">gitbay</a>, a
self-hosted, CLI-first git forge. The software makes no external
requests from your browser: no analytics, no CDNs, no webfonts, no
tracking of any kind. Everything you see is served from this host.</p>
<p>What the server stores is what a forge needs to function: your
account (username, email addresses, public SSH/PGP keys), the
repositories and their contents, issues, merge requests, comments, and
a security audit log of account and repository actions (recording the
acting user, the action, and the public key fingerprint used). Web
sessions use a single cookie, only after you log in. Private
repositories are visible only to accounts you grant; to everyone else
they are indistinguishable from nonexistent.</p>
<p>Your data is portable by design: <code>gitbay auth export</code>
downloads your account bundle, git data is yours by clone, and
<code>gitbay migrate</code> moves everything to another instance.</p>

<h2>The mobile client</h2>
<p>The iOS app is a client for an instance you name at sign-in. It has
no account of its own, no sign-up, and no server of ours behind it: it
speaks only to that instance, over HTTPS.</p>
<p>Signing in stores one API token in the device Keychain. Which account
is active is kept in app preferences; nothing else is retained on the
device. The app embeds no analytics, no crash reporting, and no
third-party SDK, so there is nothing to opt out of. Removing the account
deletes the token from the Keychain.</p>
<p>Tokens are minted over SSH or on the settings page and can be revoked at any time with
<code>gitbay auth token revoke</code>, which ends the app's access
immediately.</p>

<h2>This instance ({{.Host}})</h2>
{{if .Notice}}{{range paragraphs .Notice}}<p>{{.}}</p>{{end}}
{{else}}<p class="desc">The operator of this instance has not added
instance-specific notes. Questions about backups, retention, or
jurisdiction go to the operator.</p>{{end}}
</div>
{{end}}