Last updated 18 October 2026

Privacy

This page covers the Open in Review browser extension, the Open in Review userscript, and the hand-off page on review-code.dev that opens pull requests in the app. In short: they read the address of the GitHub page you're on when you ask them to, hand it to the Review app on your computer, and send nothing anywhere.

The browser extension

• What it reads. It runs only on pages under https://github.com/. When you press its shortcut, it reads the address of the current page. If that is a pull request, it takes the owner, repository name and pull request number from it. It never reads the page's content, your GitHub account, your cookies or anything you type.
• What it does with it. It opens a review-code:// link with that owner, repository and number. Your browser hands the link to the Review app installed on your computer, usually after asking you. Nothing goes over the network.
• What it stores. Only the shortcut you choose in its options, in your browser's extension storage. If you turned on your browser's sync, the browser syncs that setting with your browser account, like any other extension setting.
• What it doesn't do. It makes no network requests. It has no analytics, tracking, ads or remote code. It collects no personal data, and so sells or shares none.

The userscript

The userscript does the same as the extension, with the shortcut written into the script. It stores nothing. Your userscript manager (for example Tampermonkey or Violentmonkey) checks review-code.dev for new versions of it.

The hand-off page

When you open a pull request's address on review-code.dev instead of github.com, the page reads that address in your browser and opens the same review-code:// link. It has no analytics or cookies. The site is hosted on GitHub Pages and loads its fonts from Google Fonts, so GitHub and Google receive the usual request information (such as your IP address) when you visit any page of the site, under their own privacy policies.

The Review app

The app keeps your reviews on your computer. It talks to GitHub, and to an AI provider only if you connect one; the user guide describes what it sends and when.

Questions

Open an issue on GitHub. The extension and the userscript are open source, in the same repository, so you can read exactly what they do.