Privacy notice

What we use and why

We store your GitHub full name and profile-picture link to identify your profile. If GitHub does not provide a name, we ask you to enter it. Profile pictures load from GitHub, which receives your IP address and browser request information. You do not need to upload a picture.

We use GitHub identity, repository and access information, PR titles and links, author and reviewer identities, activity dates, review states and synchronization status to show review queues and delays. Repository records do not retain source code, commit diffs or comment and review text. Notifications received from GitHub can contain private repository information.

New users need a verified contact email to set up repositories. We use a verified GitHub email when available, or ask you to verify an address. We retain your contact details and verification status to manage your account and send verification and welcome messages. Verification messages go only to your address; the operator receives a blind copy of your welcome message, which contains no private repository content. Mail to hello@reviewbeacon.dev is forwarded to the operator's inbox.

Sharing and service providers

Organization data is shared only with explicitly authorized members who also have GitHub access to those repositories. Changes made only on GitHub can take up to five minutes to restrict access. Removing a member or signing out does not delete shared organization data.

We use hosting, database, email and monitoring service providers to run ReviewBeacon. Primary storage is in Germany; providers and their subprocessors may also process data elsewhere, including the United States. Email services process recipients and message content. Monitoring records help detect service problems and can include account or repository identifiers; they exclude repository titles, review text, credentials and contact details. Processing is not limited to Switzerland or the EU.

Retention and deletion

We keep encrypted GitHub sign-in credentials to renew your access when you return or use ReviewBeacon. Successful navigation and actions keep your sign-in active for 30 days from that activity. Leaving a tab open does not count. Signing out ends that session and its ability to renew access. Expired sessions are removed during periodic cleanup, which can be delayed; they cannot grant access after expiry. Shared account setup and repository history remain.

Your stored name and profile-picture link remain with your sign-in identity while you participate. Verified identity-deletion requests remove these details within seven days. Signing out or deleting repository data does not remove your profile.

GitHub notification content expires within 30 days. Repository records remain while an account participates. Account deletion, uninstall and confirmed repository removal block access and schedule affected repository data for deletion within seven days; cleanup can be delayed. Suspension blocks access without deleting history. An authorized administrator reconnecting an organization before deletion can retain its repository history; deleted data cannot be recovered this way.

Contact details remain while you participate. Transactional delivery records and earlier access requests expire after 90 days. Earlier requests can include contact email, GitHub username, team size and use case; existing invitation records retain their original deletion obligations. Email copies are removed within 90 days. After verifying a deletion request, we remove matching application records and email copies within seven days. Email already accepted for delivery cannot be recalled.

The database provider publishes a 30-day retention period for backup copies. Copies can remain after live data is deleted, and legal retention obligations can apply. Other service-provider logs and backups follow their retention policies.

Your choices and rights

Request repository-data deletion in Account settings, or manage repository selection and uninstall on GitHub. Signing out does not delete data. Repository-data deletion does not delete your sign-in identity, and a member's identity-deletion request does not necessarily delete shared organization records.

Contact hello@reviewbeacon.dev to request access to or correction of your personal data, contact or identity deletion, or earlier deletion of access requests and invitations. You can also ask about restricting or objecting to processing and obtaining a copy of your data; applicable law determines these rights. We verify requests before acting. You can raise a data-protection concern with your applicable supervisory authority. Do not send credentials or private repository content.