Your code. Your approval. Nothing silent.

Refract is a product of Devrefract, a Lintel company.

You sign in to Refract with email and password.

GitHub access is only the App you install, on the repositories you allow.

We read pull requests to review them. We post one result. We apply a cleanup only after you approve.

We do not merge for you.

We do not sign you in with GitHub just to open the website.

We do not sell your repository as a product.

We do not pretend a review succeeded when it failed.

If we see credentials in a pull request, we tell you. Rotate anything that was exposed.

You can uninstall the GitHub App and narrow which repositories we see.

Report a problem

Use Contact and choose Security. We treat that as priority.