Privacy policy · updated 2026-10-02

Your repositories stay local.

FluxGit is a desktop application designed so that licensing, updates and feedback do not require your repository contents by default. This page describes what data exists, where it goes, and what stays on your machine.

localnot sent by default

Not sent by default

Repository contents and metadata: paths, remote URLs, branch names, commit IDs, file names, diffs, secrets and AI prompts. The app works entirely against your local git data.

licensemetadata only

Licensing

Activating a license sends: the license key (stored server-side only as a salted hash), the email you provide, app version, OS family, a hashed device identifier, update channel and activation timestamps. This is the minimum needed to enforce device limits and update entitlements. The service runs on Cloudflare infrastructure.

feedbackopt-in

Feedback and diagnostics

Feedback is sent only when you press Send. The optional diagnostics summary is sanitized before leaving your machine: it excludes repository paths, remotes, branch names, commit hashes, file names, diffs and anything that looks like a secret. You can read the exact payload before sending.

updatessignature-checked

Update checks

The app asks the update endpoint for its platform, architecture and current version. No repository data is attached. Updates install only if their cryptographic signature verifies against the key built into the app.

paymentsvia Paddle

Payments

When checkout goes live it will be processed by Paddle.com as merchant of record. Paddle handles your name, email and payment details under its own privacy policy; FluxGit's service receives the order email and entitlement, never your payment method.

emailwhen you write

Email

If you write to a fluxgit.com address, your message and address are used to answer you and kept as ordinary correspondence. Writing does not add you to any list.

free trialdevice hash

The 14-day trial

The trial service is not deployed yet. When enabled, starting a trial will record an email address, a salted hash of a device identifier, and the start and end dates. The address will register the trial and receive one transactional welcome and confirmation; it will not join a marketing or release list. The hash will enforce one trial per machine without storing the raw identifier, and the record will remain after the trial ends to prevent a reinstall granting another period. No repository data, password, account profile or card will be required.

release listonly if you ask

Telling you about releases

If you enter your email on the download or pricing page, that address is stored with its source, the page language, the version when available and the date. It is used only to tell you about releases or that checkout has opened. Unsubscribing marks the record rather than deleting it, so a later signup cannot silently revive an address that asked to be left alone. Ask at support@fluxgit.com to be removed entirely.

websiteoptional analytics

This website

Static pages are served by Cloudflare, which may log requests to operate the service. If you select Accept analytics, Google Analytics 4 measures page visits, traffic sources, browser and device information, approximate region, clicks on download links and successful beta, release or checkout-interest forms. It may set first-party cookies named _ga and _ga_*. FluxGit does not send repository data, email addresses, feedback text, license keys or app device identifiers to Analytics. If you reject analytics, the Google tag does not load. You can change your choice using Analytics settings in the footer. See how Google safeguards Analytics data and Google's privacy policy.

With the same consent, FluxGit also records daily totals of page views, clicks leading to the download page and clicks on build links. Totals are grouped by public page path, page language, source category, approximate country and, for build clicks, platform and version. Cloudflare supplies the country separately from the page language. This analytics database stores no IP address, cookie, visitor or device identifier, email, full referrer or download URL, query string or form text. Reports cover up to 30 UTC days. Older totals are deleted when a new event is recorded or a report is read; no scheduled cleanup runs while inactive. They count repeated views and clicks, not distinct people, completed downloads or installations. Rejecting analytics or withdrawing consent stops both forms of measurement.

your datacontact

Questions, deletion, export

Write to support@fluxgit.com to ask what is stored for your license, correct it, or delete it (deleting a license's data revokes the license). You will get an answer from a human.

Keep up with FluxGit

If you request product updates, we store your email, language, request source and consent and confirmation status. ZeptoMail delivers the confirmation email; product updates require confirmation. Confirmation links expire after 24 hours. Use the link in an email to unsubscribe. Subscription is optional and separate from analytics consent. Action tokens are not added to analytics.