gitscanPrivacy policy
Last updated 2026-10-24
gitscan is a browser extension that, on a GitHub repository page, looks for token contract addresses in the repository's description, README and a few root config files, and shows whether each address is a real token.
What it does with data
Runs locally in your browser. It reads the repository name from the GitHub page you are viewing, and scans the repository's public text for blockchain addresses.
Sent to third parties, only to do the check:
| Data | Sent to | Why |
|---|---|---|
| Repository name (owner/name) and, if you set one, your GitHub token | api.github.com and raw.githubusercontent.com (GitHub) | Fetch the repository's public files. The token is sent only to api.github.com. |
| Blockchain addresses found in the repository | api.dexscreener.com (Dexscreener) | Look up whether the address is a traded token. |
| Solana addresses found in the repository | solana-rpc.publicnode.com (PublicNode Solana RPC) | Check whether the address is a token mint, wallet or program. |
These services receive your IP address, as any website does. The repository name is not sent to Dexscreener or the Solana RPC.
Stored on your device (the browser's extension storage): your optional GitHub token and settings, and scan results kept up to 30 minutes so repeat visits don't re-fetch.
What it does not do
- No analytics, tracking, advertising or telemetry. There is no server run by the developer.
- No collection of browsing history. It acts only on github.com repository pages, and reads only the page's repository name.
- No sale or transfer of user data beyond the lookups listed above.
Your GitHub token
The token is optional. If you add one, it is stored unencrypted in the extension's local storage on your device, as browser extensions normally store settings, and it is sent only to api.github.com. Use a fine-grained token with no permissions (public read-only). You can remove it at any time from the extension's options ("Remove token") or by removing the extension.
Open source
The extension's code is public, so every claim on this page can be checked: github.com/HastyBu1lds/gitscan.
This website
This site is static. It has no analytics, no cookies and no forms. Its fonts are loaded from Google Fonts, which means your browser contacts Google to fetch them.
Not financial advice
Market data shown (price, market cap, liquidity) comes from Dexscreener and is informational only. A contract address appearing in a repository is a claim by whoever wrote it, not verification.
Contact
privacy@example.com