Privacy Policy

Last updated: February 2026

1. Information We Collect

When you sign in with GitHub, we receive your public profile information (username, display name, avatar URL) and a time-limited access token to fetch your public activity data. If you link additional platforms (Bitbucket, Codeberg), we receive similar public profile and activity data from those services.

2. How We Use Your Information

We use your development activity data solely to compute your Developer Impact Profile and generate your badge. We cache computed profiles for up to 24 hours to reduce API calls. We do not sell, share, or transfer your data to third parties.

3. Data Storage

Session data is stored in an encrypted HTTP-only cookie in your browser. Cached scores are stored in Upstash Redis with a 24-hour TTL and are automatically deleted after expiration.

4. Analytics

We use PostHog for basic, privacy-friendly analytics (page views and key events). No personal information is sent to analytics services.

5. Your Rights

You can sign out at any time to clear your session. You can revoke Chapa's access to your GitHub account through your GitHub settings under "Authorized OAuth Apps." You can also unlink Bitbucket or Codeberg accounts from your profile at any time.

6. Contact

For privacy-related inquiries, contact us at support@chapa.thecreativetoken.com.