Everything Bounty Watch knows (your targets, the change feed, settings) lives in your own private GitHub repository. This page reads and saves it with a token that stays in this browser.
This token can only touch your watch repo. It is never sent anywhere except api.github.com.