Privacy Policy

1. Our Privacy-First Philosophy

Repo2Txt was built on a simple principle: your source code is your intellectual property, and it should never touch a server you don't control. Unlike most "AI tools" that upload your files to process them on a remote server, Repo2Txt runs entirely in your web browser using JavaScript. The server only serves the static HTML, CSS, and JavaScript files that make up the application — it never sees your code.

This means you could disconnect your internet after the page loads, and the tool would keep working perfectly. We believe privacy isn't a feature you add — it's a foundation you build on.

2. Files You Process

When you pick a folder or drag-and-drop files into Repo2Txt, the browser reads those files using the File System Access API or the standard<input type="file" webkitdirectory>element. The file contents are held in your browser's memory (RAM) only — they are:

• Never uploaded to any server, API, or third-party service.
• Never stored in a database, file system, or cloud storage.
• Never logged — there are no server logs that could contain your data.
• Never cached on disk — they exist only in volatile memory and are cleared when you close the tab.

You can verify all of this yourself. Open your browser's Developer Tools (F12), go to theNetwork tab, and then pick a folder. You will see exactly zero outgoing requests containing file contents.

3. Data We Don't Collect

To be explicit, Repo2Txt does not collect, store, or transmit:

• Your name, email, or any personal information (we don't have accounts).
• Your IP address (we don't run analytics or server-side logging beyond standard CDN delivery).
• Your browser fingerprint or device information.
• The files you convert or their contents.
• Your usage patterns, session recordings, or heatmaps.
• Cookies for tracking (we only use localStorage for theme preference — see section 5).

4. Local Storage

Repo2Txt uses your browser's localStorage to remember two things:

• Theme preference — whether you prefer dark or light mode (key: theme).

This data never leaves your browser. You can clear it at any time by clearing your browser's site data for repo2txt.app.

5. Third-Party Services

Repo2Txt does not use any third-party services that could see your data. Specifically, we donot use:

• Google Analytics, Plausible, Fathom, or any other web analytics.
• Sentry, Rollbar, or any error-tracking service.
• Hotjar, FullStory, or any session-recording tools.
• Facebook Pixel, Google Tag Manager, or any marketing pixels.
• Cloudflare Workers, Vercel Edge Functions, or any serverless compute that could inspect traffic.

The only third-party resources loaded are fonts from Google Fonts (loaded vianext/font with display: swap), which are served as static assets and do not transmit any information about you or your files.

6. Content Security Policy

We enforce a strict Content Security Policy (CSP) that tells your browser which resources are allowed to load. Our CSP restricts:

• default-src 'self' — only load resources from our own domain by default.
• frame-ancestors 'none' — prevents the site from being embedded in iframes (clickjacking protection).
• object-src 'none' — blocks plugins like Flash or Java.
• base-uri 'self' — prevents base-tag injection attacks.

7. Open Source & Self-Hosting

Repo2Txt's source code is available for review. If you're particularly privacy-conscious, you can clone the repository, audit the code yourself, and self-host it on your own infrastructure. Because the tool has no backend, self-hosting is as simple as serving the static build output from any web server (nginx, Caddy, GitHub Pages, etc.).

8. Children's Privacy

Repo2Txt is not directed at children under 13, and we do not knowingly collect personal information from children. Since we don't collect personal information from anyone, this is naturally satisfied — but we state it explicitly for compliance with COPPA and similar regulations.

9. Changes to This Policy

If we ever change our privacy practices in a way that affects your data, we will update this page and bump the "Last updated" date at the top. Because Repo2Txt is privacy-first by design, any change that weakens privacy would be a fundamental shift in the product's philosophy — and we would announce it loudly, not quietly.

10. Contact

If you have questions about this privacy policy or Repo2Txt's data practices, you can reach out via our GitHub repository orX (Twitter).

This privacy policy is part of Repo2Txt's commitment to transparent, privacy-first software. We believe tools that respect your privacy shouldn't be the exception — they should be the default.