Privacy

A plain description of what this service stores and why.

Who is responsible

Your code never leaves your machine

The analysis runs entirely on your own computer, against your own Git repository. No source code, file contents or repository data are uploaded to this server at any point, on any plan.

If you are signed in, the result of a scan is synced so it appears on your dashboard: file paths, the statistics derived from your Git history (how often a file changed, how many of those changes were fixes, how many authors touched it), the repository name and branch, and the timestamps. You can delete any scan, or all of them, at any time.

What an account stores

• Your email address and display name.
• Your password, only ever as an Argon2 hash — never as text, and not recoverable.
• If you sign in with Google: the identifier Google gives us, plus the name and profile picture URL it returns.
• When the account was created and when you last signed in.
• For each signed-in browser: a hash of the session token and its expiry.
• A count of scans per month, to apply the plan's allowance.

Cookies

Two, both strictly necessary, neither used for tracking and no third party involved:

• lynix_session — keeps you signed in. Expires after 30 days.
• lynix_lang — remembers whether you chose English or German.

Payments

Payments are handled by Stripe. Card details are entered on Stripe's own pages and never reach this server. We store the Stripe customer and subscription identifiers, your plan and its status, so we know what you are entitled to.

Server logs and abuse prevention

Failed sign-in attempts are counted per IP address, in memory only, for 15 minutes, so that passwords cannot be guessed in bulk. These counters are not written to disk and are gone when the server restarts.

How long things are kept

Account data is kept until you delete the account. Scans are kept until you delete them. Expired sessions and used email links are removed automatically.

Your rights

You can download everything this service holds about you as a single JSON file, and you can delete your account and all of it, both from the Settings dialog in your dashboard. Deleting the account also cancels any running subscription. Beyond that you have the rights to rectification, restriction and to complain to a supervisory authority; write to the address above.