Privacy Policy
1. Controller
Levin Keller, Hohenzollerndamm 152, 14199 Berlin, Germany.
2. Data we collect
When you use this service, we process the following data:
- GitHub User ID and username — obtained via GitHub OAuth when you authorize the service.
- GitHub OAuth access token — stored encrypted in Cloudflare KV with a 30-day expiration. Used solely to forward your requests to the GitHub MCP server.
- OAuth session data — temporary data required for the OAuth 2.1 authorization flow (authorization codes, client registrations, refresh tokens). Managed by the OAuth provider library.
3. Purpose of processing
All data is processed exclusively to authenticate you with GitHub and proxy MCP requests from your AI assistant to the GitHub MCP server on your behalf. We do not analyze, sell, or share your data with third parties beyond what is necessary to provide the service.
4. Data storage
Data is stored in Cloudflare KV (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare acts as a data processor. Processing is governed by Cloudflare's Data Processing Addendum and Standard Contractual Clauses for transfers outside the EU.
5. Data retention
- GitHub OAuth tokens: 30 days
- Authorization state data: 10 minutes
- OAuth grants and refresh tokens: until revoked
6. Your rights
Under the GDPR, you have the right to access, rectify, delete, restrict processing, data portability, and object to processing. You can revoke access at any time by removing the GitHub App from your GitHub account settings. To exercise your rights, contact us at post (at) levinkeller.de.
7. No cookies for tracking
This service does not use tracking cookies or analytics. A short-lived, HMAC-signed cookie is used solely during the OAuth authorization flow (maximum 10 minutes) and is deleted immediately after.
8. Third-party services
Requests are proxied to the GitHub MCP server operated by GitHub, Inc. (a subsidiary of Microsoft Corporation). GitHub's own privacy policy applies to the processing of requests by the GitHub MCP server.