Privacy policy

Docket collects nothing about you. It has no server, no account and no analytics, so there is no data for us to hold, share or lose.

What Docket stores, and where

Everything Docket keeps stays on your Mac.

• Your GitHub access token is held in the macOS Keychain. It is never written to a file and never sent anywhere except GitHub. Signing out deletes it.
• The pull requests it has fetched are cached in a container on your Mac so the widget can draw without waiting for the network. Titles, numbers, authors, repository names, review and build state.
• Your settings — which repositories you follow, which reach the widgets, and whether drafts and bot pull requests are hidden.
• Your GitHub username, so the app can show whose account it is signed in to. Signing out forgets it.

Removing it

Signing out deletes the token and the cached pull requests immediately.

Deleting the app does not. macOS leaves an application’s data behind when you move it to the Trash, so if you want everything gone, sign out first, or remove these by hand:

• ~/Library/Group Containers/ — the folder whose name ends uk.co.izitech.Docket, which holds the cache and the settings.
• The uk.co.izitech.Docket entry in Keychain Access, if you did not sign out.

What Docket sends, and to whom

Docket talks to GitHub and to nobody else. There is no analytics service, no crash reporter, no advertising network and no third-party framework that phones home. The only network requests it makes are:

• github.com — to sign you in, using GitHub’s own device flow. You approve the app on GitHub’s website; Docket never sees your GitHub password.
• api.github.com — to read the pull requests you opened and the ones awaiting your review, and the repositories and organisations your account belongs to.

We operate no server, so none of this passes through us. What GitHub records about those requests is covered by GitHub’s own privacy statement.

What Docket asks GitHub for

Signing in requests two scopes: repo, which is the narrowest scope GitHub offers that can see pull requests in private repositories, and read:org, which lets Docket group your pull requests by organisation. Docket only ever reads. It does not open, merge, comment on or close anything.

You can withdraw that access at any time from your GitHub applications settings, without uninstalling the app.

Children

Docket is a tool for software developers and is not directed at children.

Changes

If this policy changes, the revised version will appear on this page with a new effective date. Since Docket has no way to contact you, there is no notification to send.

Contact

Docket is made by Izitech Ltd, a company registered in the United Kingdom. Questions about this policy: docket@izitech.co.uk.