Privacy Policy
1. Who we are
MergePro is an open-source macOS application and this website (mergepro.app), both made by Jonathan Sudhakar (“we”, “us”). This policy explains what information the MergePro app (the “App”) and this website handle, and where it goes. The App’s source code is public at github.com/jonathansudhakar1/mergepro, so you can check these statements yourself.
2. The MergePro app
We collect no personal data
The App does not send any information to us. We do not operate servers for the App, you do not create an account with us, and the App contains no analytics, telemetry, crash-reporting, advertising or tracking code. We cannot see who uses the App or how.
If the App is distributed through the Mac App Store, its App Store privacy label is expected to read “Data Not Collected”.
Signing in with GitHub
You connect a GitHub account using GitHub’s OAuth device flow: the App shows a code, you enter it on github.com and approve access there. The App never sees your GitHub password. GitHub then issues an access token to the App on your Mac. That token is stored in the macOS Keychain on your device and is sent only to GitHub, to make requests on your behalf.
Data the App stores on your Mac
To show your pull requests, reviews, checks, workflow runs, repositories and notifications, the App fetches that information from GitHub and caches it locally on your Mac in a SQLite database inside the App’s sandbox container, together with your settings (such as saved views, shortcuts and drafts). This data stays on your Mac. We never receive it.
Local Git repositories
The App runs in the macOS App Sandbox. It can only open folders you explicitly select. Git operations (such as viewing changes, staging, committing, branching, stashing or resolving conflicts) run on your Mac, on those folders only. Operations that you start and that need the network, such as fetch, pull or push, connect to the Git remotes configured in that repository, just as Git would from the command line.
Notifications
If you turn on notifications, they are generated on your Mac from data the App already fetched from GitHub and delivered through macOS. No notification service of ours is involved.
3. GitHub
The App connects directly to GitHub (github.com and GitHub’s API and content hosts). Some downloads that GitHub provides through redirect links, such as GitHub Actions logs, artifacts or release assets, may be served from storage providers GitHub uses. When you use the App, GitHub receives your requests, your access token and technical information such as your IP address, as it would when you use GitHub in a browser. Anything you post or change through the App (for example reviews, comments, labels, merges or deployment approvals) is sent to GitHub and becomes part of your GitHub data.
GitHub’s handling of that information is governed by the GitHub General Privacy Statement, not by this policy. We do not control GitHub and are not affiliated with GitHub, Inc.
4. Removing your data
- Remove an account: removing a GitHub account in the App’s Settings deletes its Keychain item and its cached data from your Mac.
- Revoke GitHub access: GitHub keeps the authorization you granted until you revoke it. You can revoke it any time at github.com/settings/applications (the App links there after you remove an account).
- Delete everything: deleting the App and its container from your Mac removes all locally cached data. Your local Git repositories are your own folders and are not deleted.
5. This website
mergepro.app is a static website hosted on GitHub Pages. It sets no cookies, uses no analytics or trackers, loads no third-party scripts, fonts or embeds, and has no forms. We do not collect information about visitors.
Like any web host, GitHub may log technical information about requests to this site, such as IP addresses, for security and operational purposes. That processing is governed by the GitHub General Privacy Statement. Links to other sites (such as GitHub) are governed by those sites’ policies.
6. Mac App Store
If you get MergePro from the Mac App Store, Apple handles the download and any purchase under its own privacy policy. If you have chosen to share analytics with app developers in your Apple settings, Apple may provide us with aggregated, anonymized information such as download counts or crash statistics. This information does not identify you, and we do not combine it with any other data.
7. Children
MergePro is a developer tool and is not directed at children. Because the App and website collect no personal data, we do not knowingly collect personal information from anyone, including children under 13 (or the equivalent minimum age in your country). To use GitHub, you must meet GitHub’s own age requirements.
8. Changes to this policy
If the way MergePro handles data changes, we will update this page and its effective date. Material changes will also be noted in the release notes on GitHub Releases. The history of this page is public in the project’s repository.
9. Contact
Questions about privacy? Please open an issue at github.com/jonathansudhakar1/mergepro/issues. Please do not include access tokens or other secrets in an issue.