shipnotePrivacy
What is read, and what is not
What shipnote reads, what it publishes, and what it does not do.
What it reads
The nightly job reads only public repositories where your account made commits in the window. Private repositories are excluded by the GitHub query itself.
What it publishes
The dataset is uploaded as a workflow artifact, which GitHub deletes after 10 days. It contains full diffs, so anyone with read access to the repository can download it during that window. Keep secrets out of commits.
Secret scanning
Gitleaks scans the dataset before upload, and a finding fails the run. It catches common secret formats but is not a guarantee. A small allowlist covers known false positives, such as Go module checksums.
What drafting will send
When drafting runs, the selected commit data and context go to the agent provider you configure. shipnote sends nothing to any other service. This site runs no analytics or tracking scripts.
Nothing posts for you
shipnote never publishes to X, a blog, or any other platform. You review and approve each draft, then post it yourself.