PRs Inbox for GitHub

Privacy Policy

Last updated: June 11, 2026

In short: PRs Inbox for GitHub runs entirely in your browser. It has no analytics, no telemetry, and no servers of its own. The only host it ever talks to is github.com, and nothing it stores leaves your browser.

1. Data the extension accesses

The extension fetches your pull-request inbox from github.com/pulls/inbox using the github.com session you are already signed in with (your browser cookies). It never sees, asks for, or stores your password, a personal access token, or any other credential.

2. Network requests

The only host the extension communicates with is https://github.com, matching its sole host permission. There are no third-party requests of any kind — no analytics services, no crash reporters, no CDNs.

3. Data stored locally

All data stays inside Chrome's extension storage on your devices:

  • Settings (enabled sections, tab-group names and colors, filters, refresh interval) in chrome.storage.sync, which Chrome may sync between your own signed-in browsers.
  • The latest inbox snapshot (PR titles, repositories, URLs, timestamps) in chrome.storage.local, used to render the popup instantly.
  • A tab-ownership registry in chrome.storage.session, which is erased when the browser closes.
  • A debug dump of raw responses, only if you explicitly enable debug mode in the settings.

Uninstalling the extension deletes all of this data.

4. Permissions and why they are needed

  • tabs, tabGroups — create and update the synced tab groups.
  • alarms — refresh the inbox on a schedule.
  • storage — keep the settings and snapshot described above.
  • Host permission for https://github.com/* — fetch your PR inbox with your existing session.

5. Limited Use

The extension's use of data follows the Chrome Web Store User Data Policy, including its Limited Use requirements: data is used only to provide the single user-facing feature described on this site. It is never sold, never transferred to third parties, and never used for advertising, credit assessment, or any other purpose.

6. This website

This site is a static page hosted on GitHub Pages. It sets no cookies and runs no analytics. GitHub Pages may log requests (such as IP addresses) as part of normal hosting; see GitHub's privacy statement.

7. Changes & contact

Changes to this policy are published on this page with an updated date. Questions and concerns are welcome on the GitHub issue tracker.