Privacy
UGT gets GitHub projects running on your own computer, and keeps as little as it can to do that. This page covers ugt, the program you install, with its plugins and its bundle for Claude Desktop; the catalogue service at api.usegithubthing.com; the hosted MCP server at mcp.usegithubthing.com; and this website. Last changed 3 November 2026.
Your files stay on your computer
Recipes run in UGT's own Linux engine on your computer. Your files go only to the recipe you give them to, there, and never to UGT. A recipe reaches the internet, a folder or a device only as its recipe declares, and one from outside the catalogue asks you first before it reaches more than the internet and the folder you use it in. A secret a recipe needs, such as an API key, stays in your system's secret store. Results land in your UGT folder.
What ugt sends, and when
- Finding a recipe. When you or your AI app look up a project or search,
ugtasks the catalogue service which recipes it has, by the project's owner and name or the words you searched, and downloads the recipe's files by their hash. - Running a recipe.
ugtdownloads what the recipe needs: UGT's Linux engine and verified images from GitHub's package registry, and the project's own source and images from where the recipe pins them, each under that host's terms. - Run reports, only if you agree. The first time a catalogue recipe does not work,
ugtasks whether to send reports, andugt reports onoroffchanges it any time. A report says which recipe and revision ran, whether it worked, the step that failed and what UGT diagnosed, your computer's architecture, the version ofugt, and a random ID made on your computer. Never your files, paths, output or anything you typed. - Sharing a recipe, only when you ask.
ugt loginsigns you in to GitHub in your browser, andugt recipe submitopens a pull request from your GitHub account. The sign-in stays in your system's secret store. - Updates.
ugt updateasks GitHub for the newest release, only when you run it. - Your AI app. What you say to your AI app goes to that app's provider, under its terms. UGT receives only the tool calls the app makes to it.
What is kept
- Lookups: the catalogue service counts each lookup by the recipe it found, or the project it had none for. Never who asked.
- Run reports: as sent, with their random ID.
- Both are kept for 90 days, then only as daily totals with no ID in them.
- The access log: the server that runs the catalogue service and the hosted MCP server keeps a standard web server log of each request's address, time and path for 14 days, to run and protect the service.
The hosted MCP server
The server at mcp.usegithubthing.com only reads the catalogue: it answers your AI app's questions about projects, recipes and how to install UGT, and runs nothing. It counts lookups as the catalogue service does, and keeps nothing else about your requests. Its rate limit counts requests per address in memory only.
This website
usegithubthing.com uses Google Analytics, Microsoft Clarity and Cloudflare Web Analytics to see how people use it. Clarity never sees what you type: the GitHub link, your task and your searches are hidden from it, and it is off on search pages. A search's words stay out of page titles and addresses. When you give the home page a GitHub link, your browser asks GitHub about the repository directly, and your task stays in that tab.
What UGT does not do
It does not sell anything about you, show ads, or train models on your files or requests. It has no accounts.
Who handles data for UGT
Amazon Web Services runs the catalogue service and its database. Cloudflare serves this website and sits in front of the service. GitHub hosts the code, the releases and the images. Google and Microsoft run this website's analytics.
Questions and deletion
Ask through auscaster.com/studio. Run reports expire after 90 days; ask, and they are deleted sooner. ugt uninstall removes everything UGT set up on your computer.