Privacy Policy

Last updated: September 6, 2026

REPO-SIGHT ("we," "us") operates repo-sight.com (the "Service"), a free static-analysis tool for public C++, Python, and Java repositories. This policy explains what data the Service collects and how it's used.

1. What we collect

• Repository URL you submit. Used only to fetch the public repository's source for analysis.
• Analysis results. Metrics, health scores, and reports generated from your submission are stored (via Supabase Storage) so the report link stays accessible after the scan finishes.
• Feedback form input. If you use the feedback form, we store the text you submit.
• Standard server logs. IP address, user agent, and request timestamps, collected automatically by our hosting provider (Vercel) for operational and security purposes.

We do not require an account, and we do not collect names, emails, or payment information.

2. Advertising & cookies

This site displays ads served by Google AdSense. Google, as a third-party vendor, uses cookies (including the DoubleClick DART cookie) to serve ads based on your visits to this and other sites. You can opt out of personalized advertising by visiting Google Ads Settings. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this site and/or other sites on the Internet. For more detail on how Google uses data, see How Google uses information from sites or apps that use our services.

3. Repository data

We analyze only publicly accessible repository source code that you point us to. We do not execute, run, or install any code from the repositories we analyze — analysis is static (read-only source inspection). Repository content is processed to generate metrics and is not sold or shared with third parties beyond what's needed to run the Service (e.g., our storage and hosting providers).

4. Data retention

Scan reports are retained so their links remain usable. If you'd like a specific report or feedback submission removed, contact us using the details below.

5. Third-party services

• Vercel — hosting and serverless function execution.
• Supabase — storage of scan results.
• Google AdSense — advertising, as described above.

Each of these providers has its own privacy policy governing how it handles data.

6. Children's privacy

The Service is not directed at children under 13, and we do not knowingly collect personal information from children.

7. Your rights

Because the Service doesn't require an account, there's no profile to export or delete. You can still ask us to remove a specific scan report or feedback submission at any time, using the contact details below. If you're in a region with statutory data rights (e.g. GDPR or CCPA), those rights apply to the limited data described in Section 1, and requests can be sent the same way.

8. Changes to this policy

We may update this policy as the Service evolves. Material changes will be reflected by updating the date above.

9. Contact

Questions about this policy can be raised via the contact page or by emailing contact.reposight@gmail.com.