CodeGate Privacy Policy

Last updated: 27 October 2026

This policy covers the CodeGate local software, hosted GitHub checks app, plugins and the CodeGate documentation website. CodeGate is published by Sathwik R and maintained through the CodeGate GitHub project.

Local repository access

CodeGate reads the Git repository you select, its configuration and nonignored files to run quality checks. Its built-in checks inspect file contents for syntax problems, conflicts and a limited set of credential patterns. CodeGate does not require a CodeGate account, API key or paid subscription, and has no built-in telemetry or model-calling service.

Configured test, lint and build commands run with your user permissions and inherited environment. They can read files, change files, access credentials available to them or contact external services. Review those commands before running them; CodeGate is not a sandbox.

Reports and the AI client

CodeGate stores check reports and installation records in the repository's Git metadata directory and writes configuration and a vendored runner during setup. Reports and command output can contain paths, diagnostics or other project information. Pattern-based redaction does not guarantee that all secrets are removed.

When an AI client calls the CodeGate MCP tool, CodeGate returns its diagnostic report to that client. The client may process that output according to its own policies and your account settings. For ChatGPT and Codex, review the applicable OpenAI privacy information. A local check does not mean its returned output stays outside the invoking client.

Hosted GitHub checks app

The hosted CodeGate app accepts a public GitHub repository name and an optional branch, tag or commit reference. It sends those identifiers to GitHub to retrieve existing check runs, commit status contexts and workflow runs, and returns the results to the AI client that requested them. The hosted app does not run repository commands or access private repositories. Public GitHub results can contain names, descriptions, URLs and commit identifiers supplied by repository contributors.

The app runs on ChatGPT Sites. OpenAI and its hosting providers may process account, request and operational information to provide and secure the service, subject to their own policies. GitHub receives requests for the repository data under its privacy statement. The hosted app code does not write submitted repository identifiers or results to an app-operated database. Consult OpenAI and GitHub for their retention and deletion practices.

Website, downloads and support

The CodeGate website and repository are hosted by GitHub. Visiting the website, downloading files or participating in the repository involves requests to GitHub, which may process connection and account information under its privacy statement. The CodeGate website does not include publisher-added analytics, advertising trackers or a data-collection form.

Ordinary support uses GitHub issues. Your account identity and anything you post there may be public. Maintainers use submitted information to answer support requests and investigate problems. CodeGate does not operate a separate support database. Report security issues through the private security-reporting instructions; never post credentials or private customer data in a public issue.

Storage, deletion and your choices

Local reports and configuration remain on your machine until you remove them. Uninstalling CodeGate removes its recorded integrations but leaves the configuration, vendored runner and reports for deliberate cleanup.

GitHub-hosted support records follow GitHub's controls and retention practices. If you email the privacy contact, the publisher receives your address and the message you send, and handles that correspondence in the publisher's mailbox. CodeGate does not configure an automatic deletion schedule for third-party GitHub or mailbox records. You can request access, correction or deletion of information you provided by contacting the address below; third-party storage, backups and applicable requirements may affect removal.

You can choose what information to include in support messages, review output before sharing it, and use your AI client's data controls. GitHub and your chosen AI client operate their own services; consult their policies for their processing and storage locations.

Contact and changes

For CodeGate privacy questions or requests, email sathwik07@scriptonia.dev. Do not include passwords, API keys or unnecessary source code.

Updates to this policy will be published on this page with a revised date.