Privacy

Last updated: 2026-05-20

TL;DR. Pipeline Glance has no backend. Your GitLab Personal Access Token (PAT) stays in your Mac's Keychain. Your pipeline data stays on your Mac. We do not collect, store, or transmit any data about you or your usage. There is nothing for us to leak because we have nothing.

1. Who we are

Pipeline Glance is developed and operated by ILYGO Sàrl, a Swiss company registered in Vaud, Switzerland. Contact: pipeline@ilygo.ch.

2. Data that stays on your Mac

The following data is created and stored locally by Pipeline Glance, never transmitted to ILYGO or any third party:

Personal Access Token (PAT) — stored in the macOS Keychain via Security.framework, with kSecAttrAccessibleWhenUnlockedThisDeviceOnly. A backup file with 0600 permissions sits inside the app's sandbox container as a fallback for dev-build signing changes.
Pipeline cache — cache.json in the sandbox container, persisting the last poll snapshot so the popover opens with data instead of a spinner.
Notification dedup state — notifs-dedup.json remembers which transitions you've already been notified about (7-day TTL).
Settings — UserDefaults: notification preferences, polling profile, preferred language. No PII.

3. Data we send to GitLab

Pipeline Glance talks directly to gitlab.com over HTTPS. Every request carries your PAT in the PRIVATE-TOKEN header. We send GETs only — never any mutating verb. Endpoints used:

GET /user — to confirm the PAT is valid and identify you
GET /projects?membership=true — to list watchable projects
GET /projects/:id/pipelines — to list recent pipelines
GET /projects/:id/pipelines/:pid — to enrich a pipeline with detail
GET /projects/:id/pipelines/:pid/jobs — to get stage and commit info

Nothing else. No analytics endpoints, no telemetry, no third-party SDKs.

4. Data we send to ILYGO

None. We have no servers. We have no analytics pixel. We have no opened socket to ilygo.ch or ilygo-app.ch from the app.

5. This website

The marketing site you're reading is a static HTML page served from an Nginx container, hosted by ILYGO in Switzerland. Standard web-server access logs (IP, timestamp, request line, status code, user-agent) are written for security and operational purposes. They are not used for advertising or profiling and are deleted after 14 days. No cookies. No analytics scripts.

6. Cookies & tracking

None of either. The site stores a single string in localStorage for your preferred UI language (pg-lang); that's it.

7. Crash reports

Pipeline Glance does not ship with any crash reporter (Sentry, Crashlytics, Bugsnag — none of them). If you run into a crash, you can export a redacted diagnostic bundle from Settings → Diagnostics. That bundle strips secrets before display and never auto-uploads; you choose whether to send it to us.

8. Your rights under Swiss FADP/nDSG and EU GDPR

Because we don't hold any personal data about you, the usual access/rectification/erasure rights have nothing to operate on. If you've emailed us, we treat that email under standard correspondence retention (12 months) and you can ask us to delete it.

9. Changes

If we ever change how Pipeline Glance handles data — e.g. introduce an optional sync feature — we'll update this page and the in-app About screen. We won't quietly add tracking.

10. Contact

Questions, concerns, or a security disclosure: pipeline@ilygo.ch.