We use this access for exactly one thing: downloading a copy of your repo so we can scan it and build your previews. We never change your code and never push anything to your account.

So why the scary wording? GitHub’s sign-in offers private-repo access in only one size — read and write bundled together. A read-only option for private repos doesn’t exist there, so we have to request more than we use.

Your code stays 100% yours. You can revoke Rewrite’s access anytime in your GitHub settings — or skip GitHub entirely and upload a .zip of your project instead.