privacy

Privacy

The short version: today, PullMark runs on your Mac, talks only to GitHub, and collects nothing — no telemetry, no analytics, no account, no server of ours in the middle. This page describes what the app actually does now, and it changes before the app ever does.

The app

  • Nothing is collected. PullMark contains no telemetry, analytics, crash reporting, or usage tracking. We can't see what you read, review, or write — there is nothing on our side to see it with. If some form of diagnostics is ever added, it will be described here before it ships.
  • GitHub traffic goes straight to GitHub. When you open a pull request or browse a repo, PullMark calls github.com and api.github.com directly from your Mac. Those requests are governed by GitHub's privacy statement; nothing passes through any other server.
  • Your credentials stay yours. PullMark signs requests with the GitHub token it gets from your own tooling — the GitHub CLI (gh auth token) or your configured git credential helper. It never stores a copy, never writes it anywhere, and never sends it to anything but GitHub.
  • Nothing fetched is kept. API responses live in memory only (ephemeral sessions, no disk cache), and remote content such as avatars and images renders in a non-persistent web view that is discarded when you close the document.
  • Update checks. The app periodically asks GitHub's releases API whether a newer version exists — a plain HTTPS request with no identifiers beyond what any web request carries. You can trigger or observe this under Settings → General → Updates.
  • Your writing is yours. Review comments and reviews go to GitHub only when you explicitly submit them. Margin notes are saved into your own Markdown files. Drafts, settings, and reading positions are stored locally on your Mac and never leave it.

This website

  • pullmark.app is a static site with no analytics, no tracking scripts, and no cookies.
  • It's served by Cloudflare Pages, which — like any host — may keep standard, short-lived server logs of requests (Cloudflare's privacy policy).

Changes and contact

This page is a description of current behavior, not a promise it can never change — the promise is that it stays accurate: any change to what PullMark collects or transmits lands here and in the release notes before it lands on your Mac. Questions or concerns: open an issue.