This server handles App Store Connect API keys and Google Play service accounts. It never stores or transmits them anywhere except to Apple and Google.

If you find a vulnerability (for example, a way for a tool to leak credentials or act on an app the user didn't ask for), please do not open a public issue. Report it privately through GitHub's "Report a vulnerability" (Security tab) and we'll respond within a few days.