ForgeLight privacy policy

Effective 29 August 2026.

ForgeLight is a macOS app that shows what the self-hosted GitHub Actions runners on your own Mac are doing. This policy is short because the app does very little with your data, and nothing with it that leaves your Mac except what you explicitly configure.

What ForgeLight collects

Nothing. ForgeLight has no analytics, no crash reporting, no accounts, and no servers of its own. The developer receives no data from the app.

What ForgeLight reads on your Mac

• Runner folders you choose. ForgeLight reads the configuration and log files inside the runner folders you select in an open panel, and nothing else on disk. It remembers your choice with a security-scoped bookmark so it can read the same folders next time.
• The list of running processes, to tell whether a runner is busy and which build tool it is running.
• Overall CPU and memory usage of the Mac.

This information stays on your Mac. Finished jobs are kept for thirty days in the app's own storage and can be cleared at any time by removing the runner.

What ForgeLight sends over the network

Only if you add a GitHub personal access token, ForgeLight sends requests to api.github.com — and only while one of your runners is running a job — to fetch that job's workflow, branch, pull request and step details. Those requests are made with your token, on your behalf, directly to GitHub, and are governed by GitHub's privacy statement.

Your token is stored in your macOS login Keychain. It is never written to preferences, logs or files, and it is never sent anywhere except GitHub.

Without a token, ForgeLight makes no network requests at all.

Contact

Questions about this policy: see Support, or write to support@shuaiyuan.me.