gitstalk

Privacy

Draft, October 2026. Not yet reviewed by a lawyer.

This is a short, plain draft. It describes what this site and the Gitstalk service do today.

This site, today

  • This site has no forms: nothing you type here is sent anywhere.
  • We set no cookies of our own and run no third-party analytics or ads. Your browser stores one preference, day or night theme, in local storage.
  • The site is served by Cloudflare. Like any web host, Cloudflare processes your IP address and request details to deliver the page and protect it from abuse, and our request logs are kept for a short time to fix problems.
  • Fonts load from Google Fonts, which receives your IP address when it serves them.

Your account

  • An account is a handle, with a passkey, an email address or both. We store the handle, each passkey's public key and your email address (once you prove it with a code) in Cloudflare D1, and a session cookie keeps you signed in.
  • If you sign in by email, we send a six-digit code to that address through Cloudflare Email Service. We store the code only in a scrambled form for ten minutes, and the address only to sign you in and contact you about your account. We won't sell it or share it for marketing. The sign-in forms may be protected by Cloudflare Turnstile.
  • You can ask us to delete your account at any time.

Your code

Code you or your agents push to Gitstalk is stored in Cloudflare Artifacts and is only used to run the service for you. Model keys you bring (when that feature ships) will be encrypted and used only for your sessions.

Contact

Questions or deletion requests: open an issue on GitHub. A dedicated privacy address will be added before sign-up opens.