Privacy by architecture
Source discovery is narrowly handled at the edge; GitHub history and diff generation stay in your browser.
What stays in your browser
GitHub history retrieval, revision downloads, Markdown rendering, sanitization, and page comparison are performed by JavaScript in your browser. Docs X-Ray has no account system, database, or shared GitHub credential.
Reviewed product routes are mapped locally. For other routes, your browser sends the Microsoft Learn article URL to the same Docs X-Ray origin for source lookup.
Microsoft Learn source lookup
A Cloudflare Pages Function requests the supplied https://learn.microsoft.com page and returns only its public GitHub source location. It accepts only Learn URLs, follows redirects only within learn.microsoft.com, and returns sources only from the public MicrosoftDocs GitHub organization. The function does not receive GitHub history, article revisions, rendered content, diffs, or the optional GitHub token.
Cloudflare and Microsoft Learn receive the normal network information associated with those requests. The lookup response can be cached at the edge.
Requests to GitHub
Your browser contacts api.github.com to obtain public commit metadata and Markdown revisions. Relative documentation images can be loaded from raw.githubusercontent.com. GitHub receives the normal network information associated with those requests, including your IP address.
Docs X-Ray does not proxy these requests or receive their contents.
Optional GitHub token
Anonymous access is used first. If GitHub reports that its anonymous API allowance is exhausted, Docs X-Ray can store an optional fine-grained token in this browser’s origin-scoped localStorage. Browsers do not share it with another Docs X-Ray domain.
- The token is added only to HTTPS requests whose hostname is exactly
api.github.com. - It is never added to image requests, analytics, external links, or requests to Docs X-Ray.
- You can remove it at any time from API settings.
- Use the shortest practical expiry and no repository permissions for public documentation.
Feedback through UserJot
Docs X-Ray loads the UserJot feedback widget from cdn.userjot.com and connects to widget.userjot.com. UserJot receives the normal network information associated with loading and using the widget, including your IP address. Information you submit through the widget is sent to UserJot and handled under UserJot’s privacy policy.
The optional GitHub token is never sent to UserJot.
Hosting and logs
Cloudflare Pages serves the site’s static files and runs the source-lookup Function. Cloudflare may process standard request information according to its service operation and your network settings. Docs X-Ray does not add a custom analytics service.
Your controls
Clear the optional token through API settings or your browser’s site-data controls. You can also inspect the complete client implementation on GitHub.