Privacy
0xCI is a small, open-source project. This page describes exactly what data we handle and why, no more and no less.
The 0xCI website and GitHub App run no analytics, advertising, or tracking scripts of any kind. We don't know who visits this site or how you use it.
When you use the setup wizard, we set a single short-lived (1 hour), httpOnly cookie holding your GitHub OAuth token. It's used only to call GitHub's API on your behalf while you connect a repository, and it isn't used for tracking. It expires automatically and is never written to a database, since we don't have one.
0xCI has no database. When the GitHub App processes a webhook (a pull request, a workflow run), it reads what it needs from the event payload (repo and org names, PR numbers, commit and workflow-run IDs) to trigger a deploy and post a status comment on your PR. None of it is stored; it's used in memory for that single event and discarded.
0xCI uses OpenID Connect (OIDC). AWS trusts short-lived tokens issued directly by GitHub Actions for your specific repository, and that trust relationship never passes through 0xCI's infrastructure. The only AWS-related value our servers ever see is your account's role ARN (not a secret), plus a region and optional domain name, which the setup wizard writes as encrypted secrets directly into your own GitHub repository using GitHub's secrets API.
If you use the domain finder on the homepage, the domain name you type is sent to the relevant public domain registry (RDAP) to check availability. No other data accompanies that request.
0xCI is open source. If you have a question about how something works, open an issue on GitHub; that's our only support channel.
Source code: github.com/github-ftnayan/0xCI