Privacy Policy
Effective date: October 13, 2026
About this policy
This policy explains how GitHubStarMate handles information when you browse https://www.githubstarmate.com, create an account, connect GitHub, use repository discovery and mutual support features, purchase services, or contact us. For privacy questions or requests, contact hello@githubstarmate.com.
Information we collect
Account information includes your email address, password hash when you use email sign-in, account identifiers, settings, and membership or credit balance. If you sign in with Google, we receive account identifiers, your email address, and profile information used to sign you in. When you connect GitHub, we collect your GitHub username, numeric identifier, public profile information, and the personal access token you provide. We also process repository URLs and metadata, participation settings, task and action records, credit transactions, purchase and subscription records, and communications you send to support. Service emails may include tracking pixels and tracked links that record opens, clicks, and related attribution. Public GitHub data, such as repository details and star history, may be fetched even when you do not have an account.
How we use information
We use this information to authenticate you, operate your account and repository listings, carry out and verify GitHub participation, calculate credits and balances, deliver purchases and subscriptions, respond to support requests, send service communications, measure use, diagnose errors, and detect abuse or fraud. Service communications may include account notices, token reminders, and messages about repository participation. Where applicable law requires a legal basis, these purposes may involve performing our agreement with you, legitimate interests in operating and securing the service, complying with legal obligations, or your consent where required.
GitHub access and public activity
Your GitHub token is stored on the server so the service can authenticate GitHub API requests and perform enabled participation features, including stars, watches, forks, and follows, within the permissions you grant. These actions may be performed automatically according to your account settings and service tasks. A token with broader permissions can grant access beyond public repository actions; review its permissions before connecting it. GitHub activity and repository information can be publicly visible under GitHub’s own rules. You can revoke your token in GitHub settings at any time; this stops further use of that token but does not automatically undo earlier GitHub actions or delete service records. Do not send tokens or passwords in support messages.
Cookies, analytics, and diagnostics
We use cookies and browser storage for sign-in, language preferences, attribution, and other service functionality. Microsoft Clarity is used for usage analysis and session recordings. Google Analytics is used on dashboard pages. PostHog, when configured, collects page views, interactions, session recordings, and error diagnostics. Analytics may be linked to a service account identifier, GitHub username, or target repository. Recordings can include page content and interactions; password inputs are masked in the PostHog configuration. Hosting and diagnostic services may process IP addresses, request metadata, browser information, and error details. Browser settings can clear or block cookies and storage, and browser tools can limit analytics requests; blocking essential cookies may prevent sign-in. This notice does not itself create an analytics consent control.
Payments and service providers
Stripe processes payments and payment-method information. We receive payment status, transaction and checkout identifiers, purchase details, and subscription records needed to provide the service. Payment card entry is handled through the payment provider. Cloudflare provides hosting and database infrastructure. GitHub and Google process connected account requests under their own policies. Beacas provides support chat and, where used, email delivery; support messages, account identifiers, and relevant contact details may be processed by these services. Analytics providers process information described above. Error monitoring may use Sentry when enabled. Providers process information needed to deliver their services, and their own privacy policies also apply.
Shared infrastructure and other disclosures
GitHubStarMate and GitHubStarBoost use shared backend infrastructure and an account database. Account, repository, participation, credit, and transaction information may therefore be processed across these related services to operate connected features and administer accounts. Repository listings and public GitHub information can be displayed to other users. We may also disclose information when necessary to comply with law, respond to lawful requests, protect users and the service, resolve disputes, or as part of a business transfer. Third-party websites and community services linked from this site have their own privacy practices.
Storage, retention, and security
Information may be processed in countries other than where you live, depending on hosting and provider infrastructure. We retain information as needed for account operation, service delivery, transaction records, security, dispute resolution, and applicable legal obligations. Retention depends on the type of record and purpose; no single fixed deletion period applies to all information. We use measures such as password hashing and restricted server-side access to support security, but no internet service can guarantee complete security. Revoking a GitHub token and requesting deletion are separate steps.
Your choices and privacy requests
You can update available account settings, revoke GitHub tokens through GitHub, and use unsubscribe links where provided for optional email. Contact hello@githubstarmate.com to request access, correction, account deletion, or information about data handling. Depending on the law that applies to you, you may also have rights to portability, restriction, objection, withdrawal of consent, or a complaint to your local data protection authority. We may need to verify your identity and clarify the request. Some records may need to be retained for legal, security, or transaction purposes; deleting service records does not remove public data held by GitHub or other independent services.
Children and policy updates
The service is intended for developers and is not directed to children under 13. If you believe a child has provided personal information, contact us. We may update this policy as our services or practices change. The effective date above identifies the current version; material changes will be communicated as appropriate.
Privacy contact: hello@githubstarmate.com