Privacy policy
How Sweechle handles your account, your repositories and your scan results today.
Your account
You sign in with GitHub, Google or an email link through Supabase Auth. Sweechle keeps the email address and display name that provider shares, to identify you and show your name.
Your code
Sweechle reads repositories only through a read-only GitHub app, and only the repositories you choose. A repository is downloaded to a temporary folder for the scan and deleted when the scan ends. Source code is never stored. Local folders are scanned in your browser and never uploaded.
Scan results
Results include the components found and excerpts of their markup and scripts. They are encrypted before they reach the database and only you can read them: other users can't, and the app has no way around that rule.
Your GitHub connection
The token GitHub gives Sweechle is stored encrypted and used only to list and read the repositories you shared. You can disconnect at any time, which deletes it and revokes the app's access.
Analytics
Only if you accept: a third-party analytics service records how pages are used (clicks, scrolling, which pages are visited) and sets cookies to do it, so we can improve Sweechle. The pages of your scans are masked, so their text, including code, file paths and component names, is never sent. If you decline, it doesn't load at all.