Terms and privacy

Last updated November 13, 2026. Don’t Ask Again is operated by Hyperion Strategies LLC, Florida, USA.

Terms of use

What this is

Don’t Ask Again checks public GitHub data and folders you choose for credentials saved by AI coding tools, for risky agent settings, and for published indicators of the wfx-loot campaign. It runs in your browser or on your own machine.

What it is not

It is not a security guarantee. A result with no findings means none of these checks matched; it does not prove that an account, repository or machine is uncompromised. The checks follow indicators that other researchers published and that change over time. You are responsible for decisions you make from the results, including which credentials to rotate.

Fair use

• Check accounts, repositories and folders you own or are responsible for.
• If you find an exposed credential that belongs to someone else, do not use it. Tell the owner privately.
• Do not use the service to break the law, or automate it against GitHub in ways that violate GitHub’s terms.

Licenses

Pro and Team are one-time purchases of a license key for version 1 of the software, including its updates. A Pro key covers one developer on their own devices. A Team key covers up to ten developers in one organization. Keys are not for resale or public sharing. We may stop honoring a key that has been published.

Refunds

If the paid features found nothing useful for you, reply to your Stripe receipt within 14 days of purchase and we will refund it.

Warranty and liability

The service is provided as is, without warranties of any kind, to the extent the law allows. Hyperion Strategies LLC is not liable for indirect or consequential losses, and its total liability for any claim about the service is limited to the amount you paid for it in the twelve months before the claim.

Other terms

Don’t Ask Again is an independent project. It is not affiliated with or endorsed by Anthropic, GitHub, Aikido Security, GitGuardian or Apiiro; their names are used only to describe what is checked and to credit their research. These terms are governed by the laws of the State of Florida. We may update them, and will change the date above when we do.

Privacy

What we never receive

• The GitHub name you type, or anything GitHub returns about it.
• The names or contents of folders and files you sweep.
• Your findings, masked or not.

The check is a script that runs on your device. There is no server on our side that takes part in a scan.

What your browser sends to others

• GitHub. A GitHub check makes requests from your browser to api.github.com and raw.githubusercontent.com. GitHub sees your IP address and what you asked for, under its own privacy policy.
• Stripe. If you buy a license, Stripe processes the payment and shares with us your email, name, billing country and postal code, and the payment status. We never see card numbers.

What we do hold

• Hosting logs. The site is served by Vercel, which logs requests (IP address, browser, page) to run and protect the service.
• Usage counts. We use Vercel Web Analytics, which sets no cookies. It counts page views and a few events: that a check started, whether it was a GitHub check or a folder sweep, the overall verdict, and clicks on buy buttons. It never includes the account, repository, folder or findings.
• License records. When you activate a purchase, your browser sends the Stripe checkout ID to our license service (hosted on Supabase). We store that ID, the plan, the amount and currency, a one-way hash of your email address, and how many times the purchase has been activated.

Your license key is stored in your browser’s local storage on your device. We set no cookies, show no ads and do not sell or share personal data.

Keeping and deleting

License and payment records are kept for as long as tax and accounting rules require. To ask what we hold about you or to have it deleted where the law allows, reply to your Stripe receipt or message @null0x.