What stays on your device

Everything Trayage stores lives only on your own machine, under %APPDATA%\Trayage, and is never transmitted to us:

• OAuth tokens — encrypted at rest with Windows DPAPI (per-user, per-machine).
• Settings — your poll interval, theme, and watched repositories.
• Logs — a local application log and crash log for troubleshooting. Tokens are never written to them, and account identifiers (your provider login and user ID) are kept out on a best-effort basis.

Where your data goes

Trayage talks directly to GitHub and Bitbucket from your machine, as you, using the tokens you authorised — solely to read your inbox and open pages you click. There is no Trayage server in the middle. Your use of those services is governed by their own privacy policies, not this one.

This website

This page is a static site hosted on GitHub Pages. It sets no cookies and runs no analytics. In the interest of full honesty, it does make a few third-party requests that necessarily share your IP address with those providers:

• GitHub — serving the page (GitHub Pages) and, on the home page only, a request to the public GitHub API to show the latest release version.
• Google Fonts — the page's fonts are loaded from Google's font CDN.

None of these are operated by Trayage, and none receive any personal data from us.

Changes

If this policy ever changes, the update will appear here in the repository's history. Questions? Open an issue on GitHub.

Last updated: 16 June 2026