Last updated · October 26, 2026

Privacy Policy

Your merge requests are your business. GitLight runs entirely on your Mac and collects nothing about you.

Nothing about you is collected, shared, or sold.
GitLight only talks to the GitLab server you choose.
It can only read. It can't change anything in your projects.
You can disconnect it at any time.

When you connect GitLab

You sign in on GitLab's own page in your browser, so you never type your password into GitLight. You then grant read-only access (read_api), which lets GitLight see the open merge requests assigned to you or waiting on your review, and how their reviews are going. Nothing more.

What stays on your Mac

Your sign-in token, kept in your macOS Keychain like your other passwords.
Your Settings: gitlab.com or the self-managed GitLab address, and an Application ID if you entered one.
Your merge request list, held in memory only while GitLight is running. It's never saved to disk.

What never happens

You don't create an account. There's nothing to sign up for.
No analytics, ads, or tracking of any kind.
Your data never goes anywhere except between your Mac and your GitLab server. Not to the developer, not to anyone else.

If you stop using GitLight

You're always in control, and you can leave without a trace.

Disconnect in the app. Open Settings from the GitLight menu and click Disconnect. Your saved sign-in is deleted from your Keychain, and the settings you entered are cleared, right away.
Turn off access. In GitLab, open your avatar → Edit profile → Applications and revoke GitLight. From that moment on, it can't see anything in your account.
Remove the app. Quit GitLight from the menu bar and move it to the Trash. Your merge request list was never saved, so nothing else is left behind.
Clear the saved sign-in (optional). Open Keychain Access, search for “gitlight”, and delete the entry. Once you've turned off access it no longer works anyway, so this is just tidying up.