🔒 Private by design

Privacy Policy

Last updated: 24 June 2026

⚙ Draft / starting point — replace [LEGAL NAME] (and add a postal address in the Impressum) before relying on this. Not legal advice; have it reviewed for your situation.

Repolith runs 100% on your machine. The desktop app parses and indexes your code locally — your source code, repository contents, and the graph it builds never leave your computer and are never uploaded to us or anyone else. This policy explains the limited personal data the website handles, under the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this site is [LEGAL NAME], Berlin, Germany. Contact: hello@repolith.com. Full details: Impressum.

2. What we collect, why, and the legal basis

Data	Purpose	Legal basis (GDPR)	Retention
Email address (only if you submit the signup form)	To email you product updates about Repolith	Consent — Art. 6(1)(a)	Until you unsubscribe or ask us to delete it
Server logs (IP address, browser/user-agent, timestamp) via our host	Operating and securing the site	Legitimate interest — Art. 6(1)(f)	Short-term, per our host's standard rotation

3. What we never collect

Your source code, files, or repository data — ever. It stays on your device.
The code graph / index Repolith builds (a local database on your machine).
Any account — Repolith needs no sign-up to download or use.

4. In-app AI assistant (optional)

If you enable the in-app assistant with your own API key (e.g. Claude, OpenAI), your prompts go directly from your machine to that provider under their terms and privacy policy. We do not proxy, see, or store them. Choosing a local model (e.g. Ollama) keeps everything offline.

5. Cookies & tracking

This site sets no tracking or analytics cookies. No third-party analytics, no ad pixels. (That's why you don't see a cookie banner.)

6. Processors & recipients

We use a small number of service providers who process data on our behalf under data-processing agreements:

Hostinger — website hosting and server logs.
Web3Forms — relaying email-signup submissions to us (the form is our own; Web3Forms forwards each entry by email).
GitHub — hosting the app installers you download.

7. International transfers

Some providers are based outside the EU/EEA (e.g. in the US). Where data is transferred there, it is safeguarded by appropriate measures such as the EU Standard Contractual Clauses.

8. Your rights

Under the GDPR you have the right to: access your data; rectify it; erase it; restrict or object to processing; data portability; and to withdraw consent at any time. To exercise any of these, email hello@repolith.com.

You also have the right to lodge a complaint with a supervisory authority — for Berlin, the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

9. Contact

Questions or requests: hello@repolith.com.