Warclick Privacy Policy
Effective Date: October 12, 2026
Easy-to-Read Summary (Plain English)
This summary explains how Warclick handles data in simple terms.
The legal policy below controls if there's any conflict.
Here's what you should know:
Engineering activity analysis. Warclick does not clone repositories or use source code, file contents or filenames for its engineering analytics. GitHub responses and activity text may incidentally contain such information.
GitHub data, metadata only. We analyze activity metadata (timestamps, event types) and activity-related text like commit messages and pull request titles and descriptions to generate engineering insights.
Emails are stored for analytics accuracy. Email addresses provided by GitHub support contributor identity linking, account administration, service communications and product analytics.
Session replay is respectful. We may record sessions to improve usability. Input values are masked in session replay.
AI is used safely. Contributor identifiers and activity data may be processed by AI models from OpenAI, Anthropic, or Google, including through OpenRouter, to provide insights.
Hosting and providers. Our core application infrastructure is hosted in AWS U.S. regions. Service providers may process information in other locations.
You're in control. Organization owners can request deletion through the Service, subject to its subscription and authorization requirements.
Official Privacy Policy
This Privacy Policy describes how Warclick, LLC ("Warclick," "we," "us") collects, uses, and protects information when you use the Warclick service ("Service").
1. Information We Collect
Warclick is an engineering telemetry service designed to process contributor identities, GitHub activity and related account and usage information. It does not require or intentionally collect records about our customers' consumers or end users as part of that service. Contributor and account information may nevertheless constitute personal information under applicable privacy law. Customers should not include unrelated consumer or end-user records in text or other information made available to the Service.
1.1 GitHub-Provided Information
When you authenticate via GitHub, we receive:
- GitHub username and user ID
- Display name (if available)
- Email address (if provided by GitHub)
- Organization and repository access metadata
- Team membership metadata
1.2 Activity Metadata
We collect metadata related to GitHub activity, including:
- Commits, pull requests, issues, and reviews
- Timestamps and event types
- Activity-related text such as commit messages and pull request titles and descriptions
We do not intentionally collect the following for engineering analysis:
- Source code
- File contents or filenames
- Repository clones
- Secrets or credentials
GitHub API responses may incidentally include filenames or code changes alongside requested commit metadata, and activity text may contain information supplied by its authors. We do not use those incidental file details for engineering analysis or intentionally persist them as repository file data. This is not a guarantee that such information can never pass through the Service.
1.3 Usage & Analytics Data
We use Google Analytics and similar tools to understand product usage, including:
- Page views
- Feature usage
- Navigation patterns
1.4 Session Replay
We may use session replay tools to improve usability and diagnose issues. Session replay:
- Records user interactions visually
- Masks input values in recordings
- May display information already visible on the page; avoid placing unrelated sensitive information in activity text
2. How We Use Information
We use collected information to:
- Provide engineering telemetry and analytics
- Accurately attribute activity to contributors
- Improve product usability and performance
- Provide customer support
- Generate aggregated, anonymized industry benchmarks
- Maintain security and operational integrity
3. AI & Automated Processing
Warclick may process contributor identifiers, including GitHub usernames and display names, along with relevant activity metadata and text using AI models from OpenAI, Anthropic, or Google to generate contributor, team, and organization insights. These models may be accessed directly or through an intermediary service provider, such as OpenRouter.
4. Data Hosting & Security
- Our core application infrastructure is hosted in AWS U.S. regions
- Our service providers may process information in other locations; we do not make a blanket U.S.-only processing commitment
- Industry-standard security practices are used to protect data
- Access is limited to authorized personnel only
4.1 Security Incident Notification
Warclick will notify affected customers without undue delay, and no later than 72 hours after becoming aware of unauthorized access to, acquisition of, or disclosure of their Customer Data within systems under Warclick's control. Notification will be in writing and will describe the nature and scope of the incident, the categories and approximate volume of affected data, corrective measures taken or planned, and a contact for further inquiries, to the extent reasonably known at the time. We will provide material updates as the investigation progresses. Unsuccessful attempts that do not compromise Customer Data are excluded. Any shorter notification period required by applicable law will apply.
5. Data Retention & Deletion
- Customer Data may be retained for up to 120 days after cancellation or uninstallation for billing reconciliation and service continuity
- An organization owner may request deletion using the Service's controls, subject to the displayed subscription and authorization requirements. Eligible administrators of organizations without an owner may also use these controls. Deletion stops GitHub collection and removes organization activity data from active analytics storage. We send an email confirmation after that processing completes. Limited account, billing, security and deletion records may remain.
- Backup copies are not selectively edited and expire under the normal backup retention schedule. Deleted organization data will not be returned to active service through a backup restoration.
- After retention periods, data may be permanently deleted
6. Data Sharing
We do not sell personal data. We may share data only:
- With service providers supporting hosting, analytics, billing, communications and the AI processing described in Section 3, subject to confidentiality obligations and access needed to provide those services
- To comply with legal obligations
- In aggregated, anonymized form for benchmarking
7. Cookies & Tracking
Warclick uses cookies and similar technologies for:
- Authentication
- Analytics
- Session continuity
Tracking pixels for advertising are not currently used but may be introduced in the future. This policy will be updated if that occurs.
8. Your Rights (U.S. Residents)
When we process personal information on an organization's behalf, we reasonably assist that organization with applicable privacy-rights requests concerning information we actually process, taking into account applicable legal deadlines. Requests may relate to contributors or account users even though the Service is not designed to collect the organization's consumer or end-user records.
Depending on your state, you may have the right to:
- Access your personal data
- Request correction or deletion
- Opt out of certain data uses
Requests may be submitted to:
wlparker+warclick at gmail.com
9. Children's Privacy
The Service is intended for users 19 years of age or older. We do not knowingly collect data from minors.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email.
11. Contact
Questions about this Privacy Policy may be sent to:
wlparker+warclick at gmail.com
