Privacy Policy

Repository Groups for GitHub (Chrome extension) · Effective 2026-09-23 (version 0.5.0 and later)

This policy describes what the Repository Groups for GitHub browser extension ("the extension") does with data. The extension is developed and published by HASH7FF LLC (合同会社HASH7FF), Tokyo, Japan ("we"). Contact: support@hash7ff.com.

Summary

• The extension only reads from GitHub (api.github.com and github.com). It never writes anything to GitHub.
• Your groups are stored in your browser, in Chrome's storage for this extension. We operate no servers and receive no data from you.
• Your GitHub credential is stored only in your browser and sent only to GitHub.
• There are no analytics, no tracking, no advertising and no third-party services.

Data the extension handles

• GitHub credential. Either an access token and refresh token obtained when you use "Sign in with GitHub" (GitHub's device authorization flow), or a personal access token you paste into the settings. It is stored in the browser's extension storage (chrome.storage.local) on your device, with access restricted to the extension's own pages and service worker. It is sent to api.github.com (and, for sign-in and token refresh, github.com) to authenticate requests, and nowhere else. It is never exposed to web pages and never logged.
• Repository metadata. Names, ids, visibility, descriptions, languages, update times and star counts of the repositories you own, or that belong to an organization whose repository page you open, and your GitHub login name, read from the GitHub API. This is cached in the browser's session storage to avoid repeated requests and is discarded when the browser closes.
• Your groups. The names of the groups you create and the numeric ids of the repositories you put in them, per GitHub account. They are stored in chrome.storage.sync. If you have turned on Chrome sync, Google stores and syncs this data between your browsers as part of your Chrome sync data, under Google's privacy policy; if Chrome sync is off, the data stays on this device. We never receive it.
• Preferences. Which groups are collapsed and whether the grouped or original view is shown. Stored locally in the browser.

The extension does not collect or store your name, email address, browsing history, repository contents or any data from web pages other than the GitHub repositories page it operates on.

What the extension does on GitHub

It sends only these read-only requests to the GitHub REST API: GET /user, GET /user/repos, GET /orgs/{org}/repos and GET /user/installations, plus GitHub's OAuth device-flow endpoints on github.com for sign-in and token refresh. The Repository Groups GitHub App it uses asks for read-only repository metadata permission only; it cannot read repository contents and cannot change anything.

Versions before 0.5.0 stored groups as repository topics on GitHub. Since 0.5.0 the extension no longer writes topics; topics added by older versions are left as they are and can be removed on GitHub.

Permissions

• storage — to keep your credential, your groups and your preferences in the browser.
• Access to github.com — to show the grouped view on your repositories page, and for GitHub sign-in.
• Access to api.github.com — to read your repository list.

Data retention and deletion

All data lives in your browser (and, for groups, in your Chrome sync data if sync is on). You can remove it at any time:

• Settings → Delete all groups… removes your groups from this browser and from Chrome sync.
• Settings → Sign out removes the credential.
• Removing the extension removes what it stored in this browser.
• On GitHub, Settings → Applications → Installed GitHub Apps → Repository Groups → Configure → Uninstall removes the app's access to your repositories, and Authorized GitHub Apps → Revoke withdraws the sign-in.

Limited use

Data obtained through the extension is used only to show the grouped repository view you asked for. It is not sold, not used for advertising, not used to determine creditworthiness or for lending, and not transferred to anyone other than GitHub (to read your repositories) and, for groups, Google (only if you use Chrome sync), or as required by law.

Children

The extension is not directed at children under 13 and does not knowingly process their data.

Changes

We will post any changes to this policy on this page and update the effective date above.

Contact

HASH7FF LLC (合同会社HASH7FF) · support@hash7ff.com · hash7ff.com

日本語（参考訳）