Privacy

Who is responsible

outperform GmbH, Sömmerlistrasse 14, 9000 St. Gallen, Switzerland, is responsible for this website. Contact: support@gitpuls.com.

This website

Every service a visit to gitpuls.com involves is listed here with what it processes, why, who runs it, where, and on which legal basis. Nothing else is loaded: no fonts, scripts or images from other servers, no cookies, no advertising, no social media plug-ins.

Delivery and protection: Cloudflare

• What happens: every page, image and file of this website is delivered by Cloudflare. Cloudflare processes your IP address and the technical data sent with each request (address requested, time, browser type, referring page) and keeps them in access logs for a short period.
• Purpose: delivering the website and protecting it against attacks and abuse.
• Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
• Where: Cloudflare's worldwide network, usually a data centre near you; data can be processed in the USA. The transfer to the USA is based on the Swiss-U.S. Data Privacy Framework, under which Cloudflare is certified; where it does not apply, on the standard contractual clauses agreed with Cloudflare.
• Legal basis: our legitimate interest in a secure, working website (Art. 31 para. 1 Swiss FADP; Art. 6(1)(f) GDPR where the GDPR applies).

Visitor statistics: Cloudflare Web Analytics

• What happens: Cloudflare adds a small script to each page, loaded from static.cloudflareinsights.com. It reports the page address, the referring page, browser and device type, the country derived from your IP address and load times to Cloudflare. It sets no cookies, stores nothing on your device, uses no fingerprinting and does not follow you across sites. We see totals only.
• Purpose: counting visits per page and measuring load times, to improve the website.
• Provider and where: Cloudflare, Inc., as above.
• Legal basis: our legitimate interest in anonymous statistics (Art. 31 para. 1 FADP; Art. 6(1)(f) GDPR). Because nothing is stored on or read from your device, this site needs no consent banner.

Email: Hostpoint

• What happens: if you write to support@gitpuls.com, your message, your email address and whatever else you include are received and stored in our mailbox.
• Purpose: answering you and, if needed, following up. We keep a message for as long as that takes and do not add you to any list.
• Provider: Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, Switzerland.
• Where: Switzerland.
• Legal basis: your request (Art. 31 para. 1 FADP; Art. 6(1)(b) or (f) GDPR).

Typefaces and links

The typefaces are files on this website, delivered by Cloudflare as above; no request goes to a font service. Links to other websites load nothing until you follow them; from then on that website's own privacy policy applies.

The gitpuls software

gitpuls is software you run yourself, in one Docker container on your own computer or server. outperform GmbH does not operate it, has no access to it and receives nothing from it: no account, no licence check, no telemetry, no error reports.

• What it stores: the activity it reads from GitHub (repositories, commits, workflow runs, security alerts, Dependabot updates) and, with the optional server module, the state of your server. Everything stays in a database file on the machine where you run gitpuls; you decide how long it is kept and delete it by removing that file.
• Whom it contacts: the GitHub API, with the access token you provide, to read your activity; and the public Hacker News search (Algolia) to look up mentions of the public repositories in the ranking by stars. These requests go from your machine directly to GitHub and Algolia, under their own privacy policies.
• Your token: stays on your machine, read from a file you provide. gitpuls sends it only to GitHub.

Your rights

Under the Swiss FADP and, where it applies, the GDPR, you can ask what data is held about you, have it corrected or deleted, and object to its processing. Write to support@gitpuls.com. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, to the supervisory authority in your country.