githash docs home
Last updated: May 24, 2026
This Privacy Policy explains what information githash (“githash”, “we”, “us”)
collects when you use the website at githash.org (the “Service”), how we use it, and the
choices you have. githash is an experimental tool for looking up per-file hashes of public
GitHub repositories.
Information we collect
Searches and ingest requests
When you search for a hash or ingest a repository, we store a log entry containing the raw text you submitted (a repository URL/identifier or a file hash), the type of request, a normalized link to the result, and the time of the request. These power abuse prevention and let us understand and improve how the Service is used.
IP address and technical data
We automatically record the IP address of each request (provided to us by our infrastructure provider, Cloudflare) alongside the search log above, and in a separate short record used to enforce per-IP rate limits on new repository ingests. We do not use advertising trackers or analytics pixels.
Public repository data
When you ingest a public GitHub repository, we fetch and store information about it — repository metadata, file paths, file sizes, git blob hashes, computed SHA-256 hashes, and README text. githash only processes public repositories that a user has explicitly submitted; we do not crawl GitHub and we do not access private repositories. We do not permanently store the full contents of files — only hashes, sizes, paths, and (capped) README text.
Information stored in your browser
Your theme preference and your list of recent searches are stored in your browser’s localStorage.
This data stays on your device and is not transmitted to us. You can clear it at any time via
your browser. We do not use cookies for advertising or cross-site tracking; the only cookie we set is an
authentication cookie for site administrators.
How we use information
- To operate and provide the Service (resolving commits, hashing files, finding duplicate files across repositories, and displaying results).
- To prevent abuse and apply rate limits (using IP address).
- To maintain, secure, debug, and improve the Service.
Where applicable law requires a legal basis, we rely on our legitimate interest in operating and securing the Service.
How information is shared
We do not sell your personal information. Information is shared only as follows:
- Cloudflare
- Our hosting and database provider. It processes all requests and provides us your IP address. See Cloudflare’s privacy policy.
- GitHub
- We fetch public repository data from GitHub on your behalf. These requests originate from our servers. See GitHub’s privacy statement.
- VirusTotal
- When you click “View on VirusTotal”, your browser is redirected to virustotal.com with the file’s SHA-256 hash. At that point you are interacting with VirusTotal directly and their privacy policy applies.
We may also disclose information if required to do so by law or to protect the rights, safety, or security of githash or others.
Data retention
Search logs and rate-limit records (including IP addresses), and ingested public-repository data, are retained indefinitely until purged. We may delete or anonymize data at our discretion or upon a valid request.
Your choices and rights
Depending on your location, you may have rights to access, correct, or delete personal information we hold about
you, or to object to certain processing. To make a request, contact us at support@githash.org. Because we do
not require accounts, we may need additional information (such as the IP address and approximate time of your
requests) to locate your data.
Public content and takedowns
githash indexes only public repository data that someone has chosen to ingest. If you believe information shown
on the Service should be removed, contact us at support@githash.org.
International users
githash runs on Cloudflare’s global network. Your information may be processed in the United States and other countries where our providers operate.
Children
The Service is not directed to children, and we do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.
Contact
Questions about this policy or your data? Email support@githash.org.