Docs / Security
ShipGlance is free. Sign in with GitHub, install the App, and your board is live. Sign up free →
Security
How the hosted product protects your GitHub data. The privacy policy covers the data side; setup walkthroughs are in the guides.
Is GitHub access read-only?
Yes. Every permission the ShipGlance GitHub App requests is read-only. It cannot push, merge, open pull requests, re-run workflows, or change anything in your repositories. GitHub shows these on the install screen:
- Actions (read): workflow runs and jobs, the board itself.
- Contents (read): GitHub labels this "read access to code". ShipGlance uses it to read your workflow files (to find deploy stages), to compare the deployed commit with the branch head (drift), and to read a ShipGlance config file if you keep one in a repository. It does not store your source files.
- Metadata (read): repository names and visibility. GitHub requires this for every App.
- Email addresses (read): your primary GitHub email, for account messages you can opt out of.
Repository access uses short-lived GitHub installation tokens, minted per installation. The App's private key never leaves our control plane.
What data does ShipGlance store?
- No source code contents. The board is built from workflow run and deployment metadata.
- No card numbers. There is nothing to pay for yet; when there is, payment is handled by Stripe.
- No third-party trackers, fonts, or ad scripts. Analytics are first-party only.
Is my workspace isolated from other customers?
Yes. Every workspace has its own subdomain, and its data is kept separate from every other workspace's. That separation is enforced beneath the application on every read and write, not by application code alone, so a request that does not name a workspace returns nothing rather than someone else's data.
How is sign-in handled?
Sign-in is GitHub OAuth. There are no passwords to store or steal. Stored credentials are encrypted at rest, and customer configuration never contains secrets (see Configuration).
Are share links safe to send outside my team?
Share links are redacted and expiring by design. They carry a stripped-down view for people outside your workspace, not a session into your board, and public status embeds expose the same minimal surface. Both arrive with the paid plans, which are not on sale yet.
What happens when I delete a workspace?
Your data is deleted within 30 days of workspace deletion, backups included. See the terms for the full deletion rules.
How do I report a security issue?
Email [email protected]. Reports go directly to the people who wrote the code, and we respond promptly. If we discover a breach affecting your data, we notify affected account holders by email.