Looking at the script, here's exactly what git data gets collected and sent to YC proxy:
Commit metadata (per commit, up to 1000 commits):
Full SHA hash Short SHA Author name Author email Author timestamp Commit subject line (the first line of the commit message)
Numstat data (per commit):
File paths that were modified Number of lines added per file Number of lines deleted per file
Author detection — it actively tries to find ALL your email addresses by:
Reading your git config user.email Cross-referencing commit SHAs found in your session transcripts against git log Scanning all commits where the author name matches your git config user.name
Like why does it need YOUR GIT COMMIT HISTORY? Unless you want to spy on what products founders are actually building and shipping. And which one has the hottest product etc.
I hate these tricks run by YC.