Last updated August 2026. This page describes, in plain language, exactly what RepoKit accesses, what it stores, and what it never does — because a browser extension asking for GitHub access deserves a straight answer, not legal boilerplate.
RepoKit has no backend server. There is nothing for your data to be sent to except GitHub's own API, which your browser talks to directly. RepoKit doesn't collect analytics, doesn't track your browsing, and doesn't sell or share data — because there's no infrastructure on RepoKit's side capable of doing any of that in the first place.
If you connect a personal access token, it is stored using Chrome's local extension storage (chrome.storage.local) on your own device. It is used solely to attach an authorization header to requests your browser sends directly to api.github.com. It is never transmitted to any server operated by RepoKit, because no such server exists in this extension's architecture. You can revoke the token at any time from your GitHub account's developer settings, independent of RepoKit.
If this policy changes, the update will be reflected on this page with a revised "last updated" date. Material changes affecting how data is handled will also be reflected in the extension's Chrome Web Store listing.
Questions about this policy or RepoKit's data handling can be directed through the support contact listed on RepoKit's Chrome Web Store listing.