About

Privacy policy

The short version: glancecard has no account, no telemetry and no analytics. It reads GitHub's API and writes SVG files to your repository. This website sets no cookies.

Last updated: 14 October 2026

Who is responsible

The data controller is Giovambattista Fazioli (Undolog), an independent software developer in Italy, VAT number IT12343751009. Write to hello@undolog.com about anything on this page. See also the Legal notice.

The glancecard action and CLI

• It runs where you run it: in your own GitHub Actions workflow, or on your machine. Nothing reaches us.
• GitHub's API (api.github.com). Everything on a card is read from it, with the token you give it: the workflow's own by default. It only reads from GitHub; the one thing it writes is the commit of the cards to the repository the workflow runs in.
• Avatars (avatars.githubusercontent.com). The pictures of the profile and of a repository's contributors are downloaded and embedded in the cards.
• What a card shows is public by default: with the workflow's token, what anyone can see. Private repositories are refused unless you set allow-private, because their card would publish their activity wherever it is committed.
• No telemetry, no analytics and no crash reports. The token stays in memory and is never written anywhere.

This website

• No cookies, no analytics, no cross-site tracking, and nothing kept in your browser's storage.
• Hosting. The site is served by GitHub Pages. Like any host, GitHub processes your IP address and the details of each request to deliver the pages and keep them secure. We have no access to those logs; GitHub keeps them under its own privacy statement.
• Everything the page shows is served by the site itself, the cards included: no fonts, scripts or pictures are loaded from anywhere else.
• Email. If you write to us, we use your address and message only to answer you, and keep them no longer than the conversation needs.
• Links. GitHub, the GitHub Marketplace, GitHub Sponsors and FinderGit are services of their own, and nothing is loaded from them until you click. If you use them, their own privacy policies apply.

Why, and your rights

We process the little personal data described here to run and protect the site and to answer you when you write: our legitimate interest, or the service you asked for. GitHub may process it outside the European Union, including in the United States: it relies on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses, and we will tell you which on request.

Under the GDPR you can ask to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format: write to hello@undolog.com. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

Changes

When this page changes, the date at the top changes with it.