Privacy

GitBunki is a desktop application that runs on your Mac inside the macOS App Sandbox. When you open a repository, GitBunki reads it from your disk and runs the standard git command-line tool that's already installed on your system. Everything you see in the app is produced locally from your own repository data: commit history and graphs, diffs, blame, staging, branches, tags, stashes, and remotes.

You choose which folders GitBunki can access through the native macOS folder picker. The app only reads the repositories you point it at, and it performs its analysis on your machine. None of that repository content is sent to GitBunki or to any GitBunki-operated service.

We do not operate a backend that receives your source code, commit history, or repository contents. GitBunki has nothing to upload them to.

When you pull, push, or fetch, GitBunki invokes your local git, which talks directly to whatever Git host you've configured (for example GitHub, GitLab, or your own server). Your SSH keys and other Git credentials are used by git on your machine to authenticate with those hosts. They are never sent to GitBunki, and we never see them.

To put a friendly face next to each commit author, GitBunki uses Gravatar, a public avatar service operated by Automattic. This is the only feature that, in normal use, reaches out to a third party.

For each commit author shown on screen, GitBunki normalizes the author's email address (trimming whitespace and lowercasing it), computes a hash of it, and requests an image from https://www.gravatar.com/avatar/<hash>. The raw email address is not included in the request, only the hash. If no avatar exists for that hash, Gravatar returns a generic placeholder and GitBunki falls back to the author's initials.

Note: Gravatar hashes are an industry-standard lookup key, not a secret. They can't be reversed to recover an email address by simple inspection, but anyone who already knows an email address can compute the same hash. If you'd rather not have avatars requested, you can keep GitBunki offline or block requests to gravatar.com at your network level; the app simply shows initials instead.

Because your Mac contacts Gravatar directly to load each avatar, Gravatar receives the normal network metadata that comes with any web request you make. That includes your IP address, the request headers your system sends (such as a user agent), and the timing of the request.

GitBunki does not add any identifiers of its own to these requests. How Gravatar uses this metadata is governed by Automattic's own privacy policy, which you can review at automattic.com/privacy.

GitBunki contains no advertising. It does not bundle analytics frameworks, advertising SDKs, or third-party trackers, and it does not build a profile of you or your activity. There are no tracking pixels and no telemetry that reports your usage back to us.

We don't sell or share your data, because the app doesn't collect it in the first place.

GitBunki saves your settings on your Mac, in the app's own preferences storage. This data stays on your device and is not transmitted to us. It includes:

• Your Git author identity (the name and email you set for authoring commits).
• Your appearance preference (System, Light, or Dark).
• Secure bookmarks that let GitBunki reopen the repositories and the .ssh folder you've granted access to, so you don't have to re-pick them every launch.
• Your list of recently opened repositories.
• Interface and workflow preferences such as keyboard shortcut and terminal-integration settings.

Removing the app, or clearing its data through macOS, removes these locally stored preferences.

Questions, concerns, or requests about privacy are welcome. The best way to reach us is through the public GitBunki feedback project on GitHub, where you can open an issue or start a discussion:

This policy is effective as of June 30, 2026.

As GitBunki evolves, we may update this policy to reflect new features or clarify how things work. When we make a meaningful change, we'll revise the effective date at the top of this page. Continued use of GitBunki after an update means the revised policy applies.