RemergdSecurity and privacy
Remergd is a local app. Your code, your repositories and your sign-ins stay on your PC, and nothing about how you use Remergd is collected.
What stays on your PC
- Your repositories and code. Remergd works on them where they are and never uploads them anywhere.
- Your sign-ins. Azure DevOps and GitHub tokens are kept in Windows Credential Manager, never in Remergd's database or logs. Git signs in through Git Credential Manager, as it does without Remergd.
- Settings and logs. Logs are kept for 14 days, with tokens removed before anything is written.
- Crash reports. When Remergd closed unexpectedly, the next start shows you the report. It is only sent if you send it yourself.
What leaves your PC, and where it goes
| What | Sent to | When |
|---|---|---|
| Git commands: fetch, pull, push, clone | Your Git remotes | When you, or a background fetch you can turn off, run them |
| Calls for repositories, pull requests and comments, with your token | Azure DevOps or GitHub | Only for accounts you connect |
| Update check: your Remergd version and release lane | Remergd's update service on Cloudflare, or GitHub as a fallback | 10 seconds after start, then every 4 hours |
| The text you ask AI help about, after you have seen it | The Claude Code or GitHub Copilot CLI on your PC, under your own account with them | Only when you turn AI help on and ask |
Every connection on the internet carries your IP address. The update service does not store it: it counts update checks by version and lane only.
No usage data
Remergd collects no usage statistics today. If that changes, it will be off until you choose to share, every event will be listed here, and Remergd will show you exactly what was sent.
AI help
- Off until you turn it on in Settings.
- Uses the Claude Code or GitHub Copilot CLI you already have installed and signed in to. Remergd has no AI service of its own.
- Shows what would be sent and asks first.
- Leaves out lockfiles, generated files and anything you list, and blocks requests that look like they contain a secret.
Updates
- Every update is signed. Remergd checks the signature against a key built into the app, and the signature is tied to the version number, so an old installer cannot be passed off as a new one.
- Installers are not code-signed for Windows yet. Signed installers are coming before the public launch.
Who handles data for Remergd
| Service | For |
|---|---|
| Cloudflare | This website and the update service |
| GitHub | Hosting the installers, and the fallback for update checks |
This website sets no cookies.