Clear about your code.

What is processed

When you choose Analyze, the server downloads a bounded snapshot of the selected GitHub repository. It reads supported source files, extracts structural contracts, and returns those contracts to your browser. It does not execute repository code, install its dependencies, or send it to an AI model.

Where data lives

Source snapshots are processed in server memory and are not stored in an application database or on disk. Extracted contracts remain in the open browser workspace until you clear them, sign out, or leave the page. Downloaded exports are saved on your device.

Private repository access

GitHub App access is limited to the repositories and permissions you approve. Your GitHub user token is sealed in an encrypted HttpOnly session cookie and never returned in client JSON. Sessions expire after at most 8 hours. Sign out clears the site's session cookie; you can revoke the app separately in GitHub settings.

Excluded files

Environment files, files named credentials or secrets, private key files, symlinks, and common generated directories are excluded from extraction. Public repositories can still contain sensitive literals in supported source files; review your generated context before sharing it.

Infrastructure metadata

GitHub and the hosting provider process requests needed to operate the service. Hosting infrastructure may record standard request metadata. RepoSpec does not add advertising analytics or sell repository data.

Your controls

Use the Clear workspace button to remove the current analysis from the page. Manage or revoke repository access from your GitHub installed-app settings. Choose what to include before downloading context.