Does cowork-deck store my GitHub token?
No. A workspace’s settings hold the account name and nothing else. The token is read from the GitHub CLI’s own keyring at the moment a session starts and handed to the child process through environment variables — GH_TOKEN, GIT_AUTHOR_*, and GIT_SSH_COMMAND where needed.
Can I use two GitHub accounts at the same time?
Yes, and without switching. Each workspace is bound to its own gh account, so sessions in two projects push, open pull requests and sign commits as two different people simultaneously. The app never calls gh auth switch, so your own shell keeps whichever account was active in it. See a GitHub account per workspace.
Does cowork-deck send any data anywhere?
No. There is no telemetry, no analytics and no account. The optional settings sync writes to a private GitHub repository that you own and create; it is off until you switch it on, and it never carries absolute paths.
Where does cowork-deck keep its settings?
In your platform’s ordinary application config directory, as plain files. Boards made of markdown cards live in folders you choose, inside your repository or anywhere else. Uninstalling is deleting the app; nothing is hidden elsewhere.