RepoSize — Privacy Policy

Last updated: July 24, 2026

RepoSize is a browser extension that shows a GitHub repository's size before you download or clone it. It is built to respect your privacy: there is no backend server, no analytics, and no tracking. Everything it stores stays on your own device.

In short

We do not operate any server and cannot collect your data.
Settings, cache, and an optional token are stored locally only.
The only network requests go from your browser to GitHub's API.
No analytics, no tracking, no ads, nothing sold or shared.

Data stored on your device

RepoSize saves the following using the browser's local storage (chrome.storage.local) — on your device only. It is never transmitted to us (we have no servers) and never synced to your browser account:

Preferences — your settings such as size units, badge position, warning threshold, and cache lifetime.
Size cache — the names and sizes of repositories you have viewed, kept temporarily so RepoSize does not re-request the same data.
Personal Access Token (optional) — if you choose to add a GitHub token, it is stored locally and used only to authenticate your requests to GitHub.

Data sent to GitHub

To display a repository's size, RepoSize requests that repository's public metadata from the GitHub REST API (https://api.github.com). These requests are made directly from your browser to GitHub over HTTPS; RepoSize does not proxy, store, or log them.

If you have added a Personal Access Token, it is sent only to GitHub, in the standard Authorization header, so that you can view private repositories and receive a higher API rate limit. Your token is never sent anywhere else.

Any data you send to GitHub is handled under GitHub's own Privacy Statement.

What RepoSize does not do

No analytics, telemetry, tracking, or fingerprinting.
No advertising.
No selling, renting, or sharing of your information.
No backend operated by us — there is nowhere for us to collect your data.
No reading of your browsing history. RepoSize only reads the URL of the GitHub tab you are actively on, to identify which repository to look up.

Permissions we request

RepoSize requests the minimum permissions needed to do its job:

Permission	Why it is needed
`storage`	Save your settings and the size cache on your device.
`activeTab`	Read the URL of the current tab when you open the popup, to identify the repository you are viewing.
`api.github.com`	Fetch repository sizes from GitHub's public API.

Your control and data deletion

Cached data expires automatically based on your Cache lifetime setting.
You can clear all cached data at any time from the options page (Clear cache).
You can remove your token at any time (Remove).
Uninstalling the extension permanently deletes everything RepoSize stored on your device.

Third-party services

GitHub (api.github.com) is the only external service RepoSize communicates with, and only to retrieve repository sizes. RepoSize does not use any analytics, advertising, or third-party tracking service.

Children's privacy

RepoSize is a developer tool that is not directed at children and does not knowingly collect personal information from anyone.

Changes to this policy

If this policy changes, the "Last updated" date above will be revised. Meaningful changes will be reflected on this page.

Contact

Questions about this policy or RepoSize's data practices? Contact you@example.com.