Privacy Policy

1. About this policy

This policy describes information handled by the Repotoire public website, including contact requests and demo feedback. You do not need an account to use the public demo or send feedback. The website does not provide account registration, repository connections, or subscription checkout.

Local CLI use is separate from website browsing. See the CLI telemetry page for information about optional CLI telemetry. Share only the repository information needed when asking us for support.

2. Contact requests and feedback

• Contact form: your name, email address, selected request topic, and message.
• Demo feedback: your feedback, the demo question it concerns, and a reply email if you choose to add one.
• Direct email: your sender address, message, and any attachments you send.

We use this information to review requests, respond when a reply address is available, support beta onboarding, and improve the demo. Submitting a form does not sign you up for a marketing email list.

Form submissions are saved in a private inbox on Cloudflare Workers and D1 before a notification is sent through Resend to [email protected]. Cloudflare Turnstile checks form submissions to limit spam. Cloudflare Email Routing forwards that inbox to Google Gmail, where we read and respond to messages. Your reply address is included so we can respond to you. These providers process message content and email addresses as part of delivery and storage.

The public demo keeps your answers and unsent feedback in page memory; refreshing clears them. Demo answers are not included in feedback emails. The public demo uses prepared guidance and does not send your answers to an AI provider. Please leave private code, credentials, and other sensitive information out of feedback.

3. Website operation and analytics

Vercel and Cloudflare provide hosting, network delivery, and protection against abuse. Requests can include your IP address, requested URL, browser information, and timestamps. We also use Sentry for error reporting and diagnostics. Diagnostic records can include request metadata and error details.

The site stores your cookie preference in your browser. On pages that offer analytics, accepting analytics permits Vercel Analytics and PostHog to collect page views, key link clicks, form progress, and demo step completion. PostHog uses an anonymous browser identifier to connect these events. We do not send form names, email addresses, message text, URL queries, or session recordings to these analytics tools. You can reject optional analytics or change your choice below. This includes the public demo. With analytics enabled, a submitted request can include the anonymous browser identifier in our private inbox so we can understand its browsing journey. Names, email addresses, feedback, and demo answers are not sent to PostHog. PostHog analytics requests use a managed proxy through Cloudflare. Rejecting analytics prevents new journey links and analytics events.

4. Storage and access

Submitted messages and follow-up notes are stored in a Cloudflare D1 database restricted to authorized staff through Cloudflare Access, as well as our email inbox. Messages may also appear in delivery records held by our providers. Closing the page or clearing browser data does not delete an already submitted message. The forms do not provide automatic deletion or a self-service data export.

For a storage or deletion question about information you sent us, use the contact route below. Provider storage and operational records may have separate retention periods. Information may be processed in the United States and other countries where our providers operate.

5. Privacy requests

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to object to or restrict its use. Send a privacy request through our contact form or email [email protected]. We review requests manually and may need to verify your identity before providing or deleting information. Include the email address you used to contact us; do not send passwords or identity documents in the initial request.

6. Children and policy updates

Repotoire is not intended for individuals under 16. We do not knowingly collect personal information from children. Contact us if you believe a child has sent us personal information.

We may update this policy as the service changes. The date above shows the latest revision. We will communicate material changes by email or through a prominent notice on the website.