PR Marmot privacy policy

What this covers

This policy covers PR Marmot for macOS and Linux, the prmarmot-cli terminal tool that ships inside it, and PR Marmot for iPad. They are published by IdeaX, s.r.o., Vavrinca Ottmayera 3, 010 04 Žilina, Slovakia.

Privacy questions go to oliver@ideax.sk.

Effective 2026-11-03. It applies to every version of each app that is available while it is in force.

What we collect: nothing

The apps collect no data about you. They contain no analytics, no crash or diagnostic reporting of their own, no advertising, and no tracking of you across other apps or websites. Nothing asks you for an App Tracking Transparency permission, because there is nothing to track.

There is no PR Marmot account and no server of ours. We cannot see what repositories you open, which pull requests you look at, or whether you, in particular, use the app. In App Store terms, that is Data Not Collected.

What Apple tells us. Like every App Store developer, we can see what App Store Connect reports about PR Marmot for iPad: how many people downloaded it, started the trial and bought it, and the proceeds, and which of our links the first downloads came from. If you have chosen to share analytics with app developers in your iPad's settings, Apple adds usage figures such as sessions, active devices and crash rate. Apple collects these under its own privacy policy and gives them to us as totals, not as a record of you. The app itself adds nothing to them.

This section is about the apps. The website you are reading is described further down, and it is not the same thing.

What stays on your device

The apps need a GitHub credential and some state to be useful. All of it stays on the device that created it.

PR Marmot for iPad. The GitHub token is kept in the device Keychain, on that device, and is not synced to iCloud. Cached boards, your settings, and your watch and snooze state live in the app's own container.

Disconnect removes the token, the cached boards, your watches and snoozes, the account file, the items the app put in Spotlight, and every setting that names your repositories: the repository list, pins, per-repository reviewers and scope. Preferences that say nothing about your account stay — appearance, density, refresh interval, and whether notifications are on. The App Store's last answer about your trial or purchase stays too; see below.

Deleting the app removes its container, which holds the caches, settings, watches and account file. It does not remove the Keychain item, because iOS keeps those when an app is deleted. Disconnect is what removes the token, so use it first if you want the credential gone from the device.

The trial and the purchase. PR Marmot for iPad's seven-day trial and its one-time purchase go through the App Store, and Apple handles them: your Apple Account, your payment details and any refund stay between you and Apple, and we never receive them. The app checks the purchase on the iPad with Apple's StoreKit, which verifies Apple's signature on the device, and sends nothing about it to us. There is no server of ours to send it to. So the board can open before the App Store answers, the app keeps a small file in its own container: which of the two this Apple Account owns, when each began, and the latest time the app has seen. That file belongs to your Apple Account, not to GitHub, so Disconnect leaves it. Deleting the app removes it, and the App Store gives the same answer again the next time the app starts.

Desktop and CLI. PR Marmot uses the GitHub CLI login you already have, or a token you sign in with. On macOS that token is kept in your login keychain under the service dev.prmarmot.auth; on Linux, and on macOS if you ask for it, in a file readable only by you. Preferences live in config.toml under your configuration directory, and watches, snoozes and change markers under your state directory. Settings → Disconnect, or prmarmot-cli auth logout, removes the token from that machine; deleting those two directories removes the rest.

Removing the token here does not revoke PR Marmot's access at GitHub. That is a separate step you take at your GitHub applications settings, and it has to be, because doing it from the app would require a client secret that PR Marmot does not have.

Who the apps talk to

For pull request data: GitHub. Requests go to the GitHub host you signed in to — github.com, or your GitHub Enterprise Server host — using your own credential, on your behalf. There is no backend of ours. Separately, the iPad app uses Apple's StoreKit for the trial and purchase described above.

What you do at GitHub is covered by GitHub's own terms: see the GitHub General Privacy Statement. Links you open from the apps — a pull request, a check, a settings page on that host — open in your browser and leave the app behind. One link is fixed rather than built from your host: Settings offers the open-source desktop repository on github.com.

The desktop app also checks for its own updates: on launch and at most once a day it reads the latest stable release information from GitHub, and nothing else. The iPad app has no update check of its own; the App Store handles that.

Notifications and search

Notifications are produced on your device by the app itself, from data it has already fetched for you. They are not push notifications from a server of ours, because there is no server of ours.

Anything the iPad app contributes to Spotlight is indexed on the device and stays there.

Children

No data is collected from anyone, children included. Nothing in these apps is directed at children, and they contain no advertising, no social features and no user-generated content of their own.

PR Marmot for iPad is rated 4+ in the App Store.

This website

Separate from the apps: prmarmot.dev measures page views with Plausible, which is cookieless and aggregate. It sets no cookies, stores nothing on your device, and does not build a profile of you or follow you to other sites. Beyond page views, events count copies of install commands and clicks on App Store links, with the install method or link placement — not who clicked. A click is not a download or purchase, and we do not join these events to Apple Accounts or GitHub accounts.

The site is served by Cloudflare, which processes the request your browser makes, as any web host does. There is no account, no login, and no form on this site.

Your rights, and the law

IdeaX, s.r.o. is established in the European Union, at Vavrinca Ottmayera 3, 010 04 Žilina, Slovakia, company registration number 50822136. For the purposes of the GDPR it would be the controller of any personal data these apps processed about you.

It processes none. Because nothing about you reaches us, there is no file of yours to access, correct, export, restrict or erase, and no consent to withdraw. The data the apps hold is on your own device, under your control, and the section above says how to remove it.

The data you read through the apps is your own GitHub data, and your rights in it are exercised with GitHub. If you believe otherwise, or want any of this explained, write to oliver@ideax.sk. You also have the right to complain to your national data protection authority.

Changes to this policy

This policy is effective 2026-11-03. Changes are published on this page, with a new effective date. There is no mailing list to notify, because we do not have your address.