Privacy policy

Last updated: August 11, 2026

This policy covers the gocov.dev website and the hosted gocov coverage service, including the gocov GitHub App and Bitbucket integration ("the service"). gocov is also available as self-hosted open-source software; when you run it on your own infrastructure, we receive no data at all and this policy does not apply.

What we collect

• Waitlist signups: the email address and answers you submit through the early-access form (forge, team size, current tool, referral source).
• Account data: when you sign in with GitHub or Bitbucket, we store your name, email address, forge account ID and the list of workspaces/organizations you belong to, as provided by the forge's OAuth API.
• Coverage data: coverage reports your CI uploads — file paths, line coverage counts, commit SHAs, branch and pull request identifiers. Source code is fetched from your forge on demand to render annotated views and is not permanently stored.
• Integration credentials: tokens you provide and OAuth grants you authorize (encrypted at rest) so the service can post statuses, checks and pull request comments on your behalf.
• Operational logs: standard server logs (IP address, requested URL, timestamp), kept briefly for security and debugging.

What we don't do

• We do not sell your data or share it with advertisers.
• We do not use third-party analytics or tracking cookies. The only cookie is the session cookie that keeps you signed in.
• We do not read or retain your source code beyond rendering coverage views you request.

Where data lives

The website and waitlist run on Cloudflare. The hosted service runs on Amazon Web Services. Coverage data and account data are stored in the service's database and are accessible only to the workspaces they belong to.

Retention & deletion

Coverage uploads are kept while your workspace is active. If you remove a repository or workspace, its data is deleted. You can request deletion of your account, workspace or waitlist entry at any time by emailing [email protected] — we honor requests within 30 days.

Your rights

You may request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Contact [email protected].

Changes

If this policy changes materially, we will note it here and update the date above. Questions? [email protected].