Release Tracker

Privacy

Privacy policy

How Release Tracker handles your information, in plain language. Last updated: .

In short

  • Release Tracker runs entirely in your browser. There is no backend operated by this project and no account.
  • Your credentials and data go only to GitHub and AWS, plus the health-check URLs you configure. If you activate a Pro license, Lemon Squeezy also gets the license key and a name for your browser, and nothing else.
  • The extension has no analytics or ads, does not sell or transfer your data, and gives us no access to it.
  • This website uses optional, consent-based analytics described below. Declining does not limit the site or extension.
  • Uninstalling the extension removes everything it stored.

What the extension stores on your device

Everything below stays in your browser. None of it is sent to the developer.

ConfigurationLocal storage
Your services, environments, AWS accounts and GitHub organization. It contains no secrets, so it is safe to share.
Last snapshotLocal storage
The most recent deployment metadata the extension collected (versions, commit identifiers, build and health status, commit and pull request titles), so the dashboard can show something right away.
SettingsLocal storage
Your preferences, such as the view mode and whether notifications are on.
GitHub tokenLocal storage
Kept in the extension’s local storage on your device, which Chrome stores unencrypted in your browser profile. Use a fine-grained, read-only token with the shortest lifetime you can accept.
AWS sign-inLocal storage
The IAM Identity Center token and its refresh token, so you stay signed in after closing the browser, as with the AWS command line tool. This is on by default and you can turn it off in Settings (Keep me signed in on this device), which keeps it in memory only. Like the GitHub token, Chrome stores it unencrypted in your browser profile. Signing out removes it.
Temporary AWS credentialsSession memory only
Short-lived credentials for reading your resources. They are kept in memory only (the browser’s session storage) and cleared when the browser closes.
Trial start dateLocal storage
The day you installed the extension, used to work out when the trial ends.
LicenseLocal storage
Only if you activate Pro: the license key, the id of this browser’s activation, the email of the order, how many activations are in use and when the license was last verified.
Local deploy historyLocal storage
Only during the trial and in Pro: a record of past deploys and the insights computed from it. It is stored only in your browser.

Where the extension sends requests

The extension makes requests directly from your browser to:

  • The GitHub API, to read builds, commits and pull requests, and to sign you in with a token or the OAuth device flow.
  • AWS APIs, to sign in with IAM Identity Center and to read the state of your Amplify, ECS, Lambda, App Runner, Elastic Beanstalk, CodePipeline, CloudFront and CloudFormation resources and load balancer targets.
  • Health-check URLs that you configure, to see whether a service answers.
  • Lemon Squeezy (api.lemonsqueezy.com), only if you activate a Pro license key, to activate and re-check it. See License activation.

Access to AWS hosts, to health-check URLs and to Lemon Squeezy is an optional permission that Chrome asks you to grant, only when you need it. The extension sends nothing to the developer or to any server operated by this project.

What we do not do

  • No analytics, telemetry or crash reporting inside the extension.
  • No ads, and no advertising identifiers.
  • No sale of your data. The extension only transfers a paid license key and browser name to Lemon Squeezy for license checks, and no deployment data. Optional website analytics are the separate, consent-based transfer described below.
  • No human access to your data: we never receive it, so there is nothing for us to read.

Chrome Web Store Limited Use

Release Tracker's use and transfer of information adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Deleting your data

  • Uninstalling the extension removes everything it stored in your browser.
  • The History page has a button that clears the recorded history, and Settings lets you sign out of AWS and GitHub, all without uninstalling.
  • To invalidate a GitHub token, revoke it in your GitHub account settings. To end an AWS sign-in, use Sign out in Settings, or end the session in IAM Identity Center.

Because the developer never receives your data, there is nothing to delete on our side.

This website

  • With your consent, it uses Vercel Web Analytics and Speed Insights to measure page visits and performance, and Google Analytics when a GA4 measurement ID is configured. If you decline, these analytics do not load or collect visits.
  • Analytics may receive the page path, page title, browser and device information, approximate location derived from the IP address, performance metrics, and clicks on install, download and checkout links. Query strings and URL fragments are removed from Vercel events. We do not send credentials, AWS or GitHub data, extension configuration, health checks or license keys.
  • Your choice is stored in your browser's local storage. You can change it at any time through “Analytics preferences” in the footer. Declining or withdrawing consent does not limit any feature.
  • Google Analytics may set first-party analytics cookies after you accept. We do not use advertising storage or personalization signals.
  • It loads no external fonts or embeds. Analytics scripts are the only optional third-party scripts.
  • Our hosting provider may keep standard server logs (for example IP address, requested page and browser type) as part of running the service.

License activation

The free plan and the trial never contact anyone. Paid licenses are sold by Lemon Squeezy, our payment provider and merchant of record: it collects your payment details, your email and the taxes, we never see your card, and its own privacy policy applies to that data.

When you paste a license key under Settings, License and press Activate, Chrome asks you to allow access to api.lemonsqueezy.com. The extension then sends Lemon Squeezy the license key and a short name for this browser (for example “Chrome on MacIntel”, with the date), and checks again about every three days while the browser runs. Nothing about your configuration, AWS or GitHub is sent. If Lemon Squeezy cannot be reached, Pro keeps working for 14 days after the last successful check.

Remove, in the same screen, frees the activation and deletes the license from your browser.

Changes to this policy

When this policy changes, the “Last updated” date at the top of this page changes with it. If a change affects what data the extension handles, it will also be mentioned in the release notes of the version that introduces it.

Contact

Questions about this policy? Write to contact@release-tracker.com. To report a security vulnerability, use security@release-tracker.com instead.