Yeah, adding a privacy/retention policy would be a good idea.

Under the hood its pretty simple (and open source), just an AWS lambda squashing the commits and stripping metadata before pushing to Github. Potentially you could tie the commit to an IP address, but I'm not logging any of that info.

I'm not really sure how I can prove that the code I'm running is the code you'll find on GH though.