GitMerch (gitmerch.com) is operated by Customnia. This page explains what data the site collects, why, and what you can do about it.
GitHub data
When you enter a GitHub username, we request that user's public profile data from the GitHub API: login, display name, avatar, follower count and the contribution calendar for the last five years. GitHub only returns what the profile makes public; private contributions are included only if the profile owner enabled "Private contributions" in their GitHub settings, and even then only as daily counts, never repository names or code.
We store this data to render the preview, the public page at gitmerch.com/github/<login>, the README badge and the statistics on that page. The data is refreshed from GitHub periodically. If you want your page removed, email hello@gitmerch.com with the username and we will delete it within 7 days.
Orders
Orders are placed and paid on customnia.com, our print-on-demand platform. Name, shipping address, email, phone and payment details are collected there and are covered by the Customnia privacy policy. GitMerch itself does not store payment information. The print files generated for your order (the preview and the print-ready artwork) are stored on Customnia's media servers for fulfilment and reprints.
Cookies and analytics
We use Google Tag Manager and Google Analytics to understand how the site is used: pages viewed, usernames submitted, products selected and Buy clicks. These tools set cookies and collect your IP address, browser and device information. The data is processed by Google under its privacy policy. You can opt out with the Google Analytics opt-out add-on or by blocking cookies in your browser; the site works without them.
We do not run advertising networks and do not sell or share personal data with third parties for marketing.
Server logs and notifications
Our web server keeps standard access logs (IP address, requested page, browser, time) for up to 15 days for security and debugging. When a GitHub username is looked up for the first time, an internal notification with that username is sent to our team chat so we can watch for abuse.
Sharing and badges
Share buttons open X or LinkedIn in a new tab; nothing is sent to those networks until you post there. The README badge is a plain image served from gitmerch.com; when it is shown on GitHub, GitHub's image proxy requests it from us and we see only that proxy's request, not the visitor of your profile.
Your rights
You can ask us what data we hold about a GitHub username, ask for it to be corrected or deleted, or object to its processing. Write to hello@gitmerch.com. If you are in the EU or UK, you also have the right to lodge a complaint with your data protection authority.
Changes
If this policy changes, the new version is published on this page with an updated date.
