Effective Date:7/29/2025

PRcade ("we", "our", "us") is committed to protecting the privacy and security of your information. This policy describes the data we access, collect, store, and process when you use the PRcade GitHub App and associated services (the "Service"), as well as the measures we take to safeguard it.

1. Information We Access

When you install PRcade on your GitHub organization or repository, we request limited GitHub permissions necessary to provide our functionality: Pull Request Metadata: IDs, titles, authors, reviewers, approvals, and timestamps. Repository Metadata: Repository name and owner information. Usernames and Avatars: Publicly available profile information for participants in pull requests. We do not access or store: Source code contents or diffs beyond what is exposed in pull request metadata. Private user information unrelated to PR activity.

2. How We Use the Data

We process PR metadata solely to: Award points, titles, and leaderboard positions based on code review activity. Provide aggregate team metrics on review participation and timelines. Display automated comments on pull requests to recognize contributions. We do not: Sell, rent, or share data with third parties for advertising or marketing. Use data for profiling or automated decision-making beyond our stated purpose.

3. Security Measures

We follow industry best practices to protect your information: OAuth 2.0 authentication for secure, token-based GitHub access. Principle of least privilege for all permissions and internal data access. Regular monitoring, dependency patching, and security reviews of our code and infrastructure. Audit logs of administrative access to production systems.

4. Your Choices and Rights

You can: Uninstall the PRcade GitHub App at any time to revoke access tokens. Request data deletion or export by emailing [support@prcade.dev]. Contact us with any questions about data handling or privacy practices.

5. Changes to This Policy We may update this Privacy Policy as our Service evolves or to comply with applicable laws. We will post changes to [prcade.dev/privacy] and update the "Effective Date" accordingly.