Not sent by default
Repository contents and metadata: paths, remote URLs, branch names, commit IDs, file names, diffs, secrets and AI prompts. The app works entirely against your local git data.
FluxGit is a desktop application designed so that licensing, updates and feedback do not require your repository contents by default. This page describes what data exists, where it goes, and what stays on your machine.
Repository contents and metadata: paths, remote URLs, branch names, commit IDs, file names, diffs, secrets and AI prompts. The app works entirely against your local git data.
Activating a license sends: the license key (stored server-side only as a salted hash), the email you provide, app version, OS family, a hashed device identifier, update channel and activation timestamps. This is the minimum needed to enforce device limits and update entitlements. The service runs on Cloudflare infrastructure.
Feedback is sent only when you press Send. The optional diagnostics summary is sanitized before leaving your machine: it excludes repository paths, remotes, branch names, commit hashes, file names, diffs and anything that looks like a secret. You can read the exact payload before sending.
The app asks the update endpoint for its platform, architecture and current version. No repository data is attached. Updates install only if their cryptographic signature verifies against the key built into the app.
When checkout goes live it will be processed by Paddle.com as merchant of record. Paddle handles your name, email and payment details under its own privacy policy; FluxGit's service receives the order email and entitlement, never your payment method.
If you write to a fluxgit.com address, your message and address are used to answer you and kept as ordinary correspondence. Writing does not add you to any list.
The trial service is not deployed yet. When enabled, starting a trial will record an email address, a salted hash of a device identifier, and the start and end dates. The address will register the trial and receive one transactional welcome and confirmation; it will not join a marketing or release list. The hash will enforce one trial per machine without storing the raw identifier, and the record will remain after the trial ends to prevent a reinstall granting another period. No repository data, password, account profile or card will be required.
If you enter your email on the download or pricing page, that address is stored with its source, the page language, the version when available and the date. It is used only to tell you about releases or that checkout has opened. Unsubscribing marks the record rather than deleting it, so a later signup cannot silently revive an address that asked to be left alone. Ask at support@fluxgit.com to be removed entirely.
Static pages are served by Cloudflare, which may log requests to operate the service. If you select Accept analytics, Google Analytics 4 measures page visits, traffic sources, browser and device information, approximate region, clicks on download links and successful beta, release or checkout-interest forms. It may set first-party cookies named _ga and _ga_*. FluxGit does not send repository data, email addresses, feedback text, license keys or app device identifiers to Analytics. If you reject analytics, the Google tag does not load. You can change your choice using Analytics settings in the footer. See how Google safeguards Analytics data and Google's privacy policy.
With the same consent, FluxGit also records daily totals of page views, clicks leading to the download page and clicks on build links. Totals are grouped by public page path, page language, source category, approximate country and, for build clicks, platform and version. Cloudflare supplies the country separately from the page language. This analytics database stores no IP address, cookie, visitor or device identifier, email, full referrer or download URL, query string or form text. Reports cover up to 30 UTC days. Older totals are deleted when a new event is recorded or a report is read; no scheduled cleanup runs while inactive. They count repeated views and clicks, not distinct people, completed downloads or installations. Rejecting analytics or withdrawing consent stops both forms of measurement.
Write to support@fluxgit.com to ask what is stored for your license, correct it, or delete it (deleting a license's data revokes the license). You will get an answer from a human.
If you request product updates, we store your email, language, request source and consent and confirmation status. ZeptoMail delivers the confirmation email; product updates require confirmation. Confirmation links expire after 24 hours. Use the link in an email to unsubscribe. Subscription is optional and separate from analytics consent. Action tokens are not added to analytics.