Show what you actuallyshippedshipped

No. GitTok pulls from your latest commits, CI runs, and a diff-aware capture pipeline. You push code; we do the rest.

One line — an <img> tag pointing at /og/readme-card.svg/<repo>. It renders as a clickable card on github.com (no JavaScript) and auto-updates when you ship a new clip.

Public is free, forever. Private repos are on the paid tier (see /pricing). No private code is ever read without explicit per-repo consent at install.

Read-only on metadata, commits, and workflow runs for the repos you select. Never your dotfiles, never your other orgs, never write access. You can audit or revoke at github.com/settings/installations.

Indefinitely, unless you remove it. You can delete any clip from your dashboard, and a full erase request (GDPR Art. 17) wipes every signup, audit row, and embed within 72 hours via our public DSR endpoint.

No. Display name, avatar, and repo URL are public. Everything else stays private to you.

We use PostHog for product analytics with session recording off. Identify only fires after sign-in. No fingerprinting, no third-party scripts, full CSP nonce on every render.

Pre-publish review is on by default — every auto-captured demo waits in your dashboard until you tap ship. You can also set keyword muzzles (env strings, internal hostnames) that auto-redact.