Privacy policy

Last updated 29 September 2026

Quick Scan First is a Chrome extension and a server that scans GitHub repositories for launch problems. This page explains what data is handled and why.

What stays in your browser

• Your GitHub token and the server address you enter in the settings are stored in this browser (chrome.storage.local).
• Your most recent report for each repository is saved in the browser so you can reopen it.

What is sent to the Quick Scan First server

• With each scan, fix, or account request, the extension sends your GitHub token and the repository name.
• The server uses the token only to act on GitHub for you: to identify your account, read repository files, and, when you press “Fix it for me”, create a branch and open a pull request. The token is not saved in our database.

What we store

• Your GitHub numeric ID and username, which identify your account.
• Your scan results: problem titles and explanations, file paths and line numbers, and the suggested prompts. Your source code itself is not saved.
• Usage counts, your credit balance, and records of the AI usage and cost of each scan and fix.
• Your Stripe customer ID and subscription status and dates, if you pay.

Other services that receive data

• Anthropic (AI review and fixes). For an AI review or a fix, the relevant repository files are sent to Anthropic’s API to be analysed. Anthropic’s own terms and privacy policy apply to that processing.
• OSV.dev (dependency check). The names and versions of the npm packages in your lockfile are sent to OSV.dev to look up known vulnerabilities. Your code is not sent.
• GitHub. Repository reads and pull requests happen on GitHub using your token.
• Stripe (payments). Payments are handled by Stripe. We never see or store your card details.

What we don’t do

• We don’t sell your data or use it for advertising.
• We don’t change your code without a pull request that you review and merge.

Your choices

• Delete your GitHub token on GitHub at any time to cut off access immediately, and remove the extension to clear what it stores in your browser.
• To have your account and stored scan results deleted, contact us at dean@dean-da-dev.co.uk.

Changes

If this policy changes, the date at the top will change.