Privacy by architecture
Microsoft Docs X-Ray is a static site. Article mapping, GitHub requests, and diff generation happen in your browser.
What stays in your browser
The page comparison is performed by JavaScript downloaded as part of the static Microsoft Docs X-Ray site. Docs X-Ray has no application server, account system, database, or shared GitHub credential.
The Microsoft Learn URL you enter is used locally to select a configured public repository and source path.
Requests to GitHub
Your browser contacts api.github.com to obtain public commit metadata and Markdown revisions. Relative documentation images can be loaded from raw.githubusercontent.com. GitHub receives the normal network information associated with those requests, including your IP address.
Docs X-Ray does not proxy these requests or receive their contents.
Optional GitHub token
Anonymous access is used first. If GitHub reports that its anonymous API allowance is exhausted, Docs X-Ray can store an optional fine-grained token in this browser’s origin-scoped localStorage. Browsers do not share it with another Docs X-Ray domain.
- The token is added only to HTTPS requests whose hostname is exactly
api.github.com. - It is never added to image requests, analytics, external links, or requests to Docs X-Ray.
- You can remove it at any time from API settings.
- Use the shortest practical expiry and no repository permissions for public documentation.
Static hosting and logs
Cloudflare Pages serves the site’s static files and may process standard web-server information according to Cloudflare’s service operation and your network settings. Docs X-Ray does not add a custom analytics or tracking service in the initial release.
Your controls
Clear the optional token through API settings or your browser’s site-data controls. You can also inspect the complete client implementation on GitHub.