Your source stays
on your device.

Atlas is a static web application. Your browser downloads public repository metadata from api.github.com and source files from raw.githubusercontent.com. GitHub receives those requests, including your IP address. The site host serves application files and may keep its normal access logs.

Indexing, parsing, layout, rendering, and searches run on your device. Source files, filenames, symbols, and maps are stored in IndexedDB under this site's origin. Local ZIP archives and folder content are never uploaded. ZIP entries are unpacked and indexed in a browser worker; repository scripts are never executed. Remove a repository from the library to delete its snapshot and cached source. Clearing this site's browser data also removes everything.

Optional usage telemetry

On the official GitHub Pages site, Umami usage analytics and public repository-name sharing start enabled for new visitors. Saved opt-outs are respected. Browser Do Not Track and Global Privacy Control disable both options. Untick either checkbox in the library to stop sharing; disabling usage analytics also disables repository-name sharing. Local builds and forks have no analytics endpoint configured.

Enabled events contain only allowlisted actions, coarse file/download counts, rounded timings, search result counts, fixed app page names, and modes such as “2d” or “symbols”. A separate checkbox controls sharing the owner/name of repositories imported from public GitHub when their map opens. ZIP and folder names are never sent. With that option disabled, no repository identity is sent. Atlas sends no file paths, code, symbol names, query text, page query strings, referrer, error messages, persistent tracking ID, or session replay. It does not load an external analytics script or read page content for tracking.

The analytics endpoint necessarily sees your IP address and normal HTTP metadata when it receives a request. Its retention and processing depend on the operator's Umami configuration. The static host and GitHub have their own data policies.

Snapshots and coverage

GitHub imports are pinned to one commit, without submodules or Git LFS objects. Binary, unsupported encoding, oversize files, and common build output directories are counted as skipped. Text is retained as its original UTF-8 content; wrapping is a view only. Symbol extraction uses Tree-sitter for supported languages; it is a syntax index, not compiler-level reference resolution. Other files remain searchable by filename and text.