How access works

This app talks to GitHub on your behalf. Nothing more.

1. 01

   We never see your password

   Sign-in happens on GitHub’s own page. We never collect, store, or ask for your GitHub password.

2. 02

   What we request

   • Who you are — so we can show your profile.
   • Your followers and following — so we can find who doesn’t follow back.
   • Permission to unfollow — used only when you tap Unfollow. We never unfollow on our own.
3. 03

   What we never touch

   • Your repositories, code, issues, or organizations.
   • Your private email, unless GitHub already shows it on your public profile.
4. 04

   Where your token lives

   The GitHub access token stays in an encrypted, HttpOnly cookie on the server. It is never sent to JavaScript in your browser, never put in a URL, and never logged.

5. 05

   How to remove access

   GitHub → Settings → Applications → Authorized OAuth Apps → Follow Manager → Revoke. After that, this app cannot read or change anything on your account.