Privacy

Last updated: October 24, 2026.

1. Overview

Tanuki is a client app for GitLab. It does not collect any data for its own purposes, except for the optional feedback feature described in section 4. The app does not contain advertising, analytics, or tracking tools.

2. Connection to your GitLab instance

To work, the app connects directly from your device to the GitLab instance you configure yourself (for example gitlab.com or a self-hosted server). It uses a personal access token that you create and enter yourself. The token requires the following scopes:

  • api: to read and change data (e.g. issues, merge requests, comments) via the GitLab REST and GraphQL APIs
  • read_user: to read your user profile
  • read_repository: to read repository content

The app communicates only with your chosen GitLab instance. No data from your GitLab account, including your access token and the content retrieved through the APIs, is sent to the developer or to any third party. All data processed through your GitLab instance is governed by the privacy policy and terms of that instance.

To read the terms and privacy policy you accepted when registering, open the path "/-/users/terms" on your GitLab instance. For gitlab.com, this is https://gitlab.com/-/users/terms.

3. Data stored on your device

The access token and the instance address you enter are stored only locally on your device in the Android secure storage. They are removed when you log out or uninstall the app.

4. Feedback feature

The app lets you send feedback to the developer. Using this feature is entirely optional. When you submit feedback:

  • The text you enter is transmitted to and stored on a server of the developer in Germany running PocketBase.
  • The IP address and user agent of your request are stored in server log files for 30 days and then deleted.
  • The feedback text is stored until the request has been processed or is no longer relevant, and then deleted.

Please do not include personal or confidential information in your feedback. No other data is sent with your feedback.

Purpose and legal basis (GDPR): The data is processed to receive and answer feedback and to keep the service secure and stable. The legal basis is your consent (Art. 6(1)(a) GDPR) by submitting the feedback, and for the log files the legitimate interest in secure operation (Art. 6(1)(f) GDPR).

5. Sharing of data

Feedback data and log files are not sold or shared with third parties. They are processed only on the developer's server.

6. Your rights

If you are in the EU/EEA, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, and the right to withdraw consent at any time. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, contact the address below. Since feedback is not linked to an account, please describe your request clearly so it can be identified.

7. Contact

Florian Schindler

support[at]schindlerflorian.de