Last updated: June 15, 2026
diffy ("we", "our", or "the extension") is a browser extension that improves GitHub pull request code review. This privacy policy explains what information the extension handles, how that information is used, and what choices you have.
diffy is developed by Suvesh Moza. We do not operate servers that collect or store your data.
Summary
- diffy does not sell your data.
- diffy does not use your data for advertising, credit decisions, or unrelated purposes.
- diffy does not run analytics or track your browsing across the web.
- Pull request content is fetched directly from GitHub and shown in your browser.
- An optional GitHub token, if you provide one, is stored locally in your browser and sent only to GitHub's API.
Information the extension handles
Website content
When you click View Diff on a GitHub pull request, diffy fetches pull request content from GitHub so it can display the diff viewer. This may include:
- Pull request metadata (for example, title, number, and branch information)
- Changed file names and paths
- Source code patches and diffs
- Inline pull request review comments and related metadata (for example, author username and comment text)
This content is used only to provide the diff viewer and inline review features you request. It is displayed in the extension overlay and may be held temporarily in memory while you use the viewer. diffy does not transmit this content to any server operated by us.
Authentication information
You may optionally save a GitHub personal access token in the extension popup. If you do:
- The token is stored locally in your browser using the extension's sync storage (
browser.storage.sync). - The token is transmitted only to GitHub's API (
api.github.com) when needed to authenticate requests on your behalf (for example, to access private repositories, increase API rate limits, or create, edit, or delete inline review comments. - You can clear the token at any time from the extension popup.
diffy does not store your token on any server we operate. We do not have access to your token.
For public pull requests where you do not provide a token, diffy may rely on your existing GitHub browser session when requesting certain resources from github.com. diffy does not read, copy, or store your GitHub password or session cookies.
Preferences stored locally
diffy stores the following preferences locally in extension storage so your settings persist between sessions:
- Preferred diff layout (split or unified)
- Preferred syntax highlighting theme
These preferences are not transmitted to us or to third parties.
Information we do not collect
diffy does not collect, store, or sell:
- Personally identifiable information such as your name, postal address, email address, or phone number
- Health information
- Financial or payment information
- Personal communications such as private email or chat messages
- Location data
- Web browsing history across sites
- User activity for analytics (such as click tracking, scroll logging, or keystroke monitoring)
How we use information
diffy uses the information described above only to provide and improve its single purpose: GitHub pull request code review. Specifically, we use it to:
- Render full-screen pull request diffs
- Show a searchable file tree
- Display inline review comments in context
- Let you post or reply to review comments when you choose to do so and have provided a token with the required permissions
- Remember your layout and theme preferences
We do not use your data for advertising, profiling, or purposes unrelated to this functionality.
How we share information
diffy does not sell or rent your data.
The extension communicates only with GitHub (github.com and api.github.com) to load pull request data and, when you provide a token, to perform authenticated actions you request. GitHub's handling of data is governed by GitHub's Privacy Statement.
We do not share your data with any other third parties.
Data retention
- GitHub token:Retained in your browser's extension storage until you clear it or uninstall the extension.
- Preferences:Retained in your browser's extension storage until you change them or uninstall the extension.
- Pull request content: Held only as needed to display the viewer and may be cached temporarily in memory during your session. diffy does not persist pull request content to long-term storage on our servers because we do not operate such servers.
Security
diffy transmits data to GitHub over HTTPS. If you choose to save a GitHub token, it is stored using your browser's extension storage mechanisms. You are responsible for keeping your token secure and granting only the permissions you need.
Your choices
- Use without a token: You can use diffy on public pull requests without providing a token.
- Clear your token: Open the extension popup and use Clear to remove a saved GitHub token.
- Uninstall: Removing the extension deletes locally stored extension data from your browser.
Changes to this policy
We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the extension after changes become effective constitutes acceptance of the revised policy.
Chrome Web Store Limited Use disclosure
diffy's use of information received from Google APIs or Chrome extension permissions adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. In particular:
- diffy only uses permissions and handled data to provide or improve user-facing features related to GitHub pull request review.
- diffy does not transfer user data to others except as needed to provide those features through GitHub's services, to comply with applicable law, or for security purposes.
- diffy does not use or transfer user data for personalized or interest-based advertising.
- diffy does not allow humans to read user data except with your consent, for security purposes, to comply with law, or in aggregated and anonymized form for internal operations.
Contact
If you have questions about this privacy policy or diffy's data practices, open an issue on GitHub:
https://github.com/suveshmoza/diffy/issues
Open source
diffy is open source. You can review how the extension works in our repository: