Just so you know, at GitLab we will not hesitate to take down content that we think is illegal or has other issues. At this point I think that WhatsSpy is acceptable but we reserve the right to change our mind.

Since it's on a custom domain, I thought that he's using open-source version of Gitlab hosted on his personal server. Do you have control over projects in open-source version of Gitlab?

No we do not control anything when people host GitLab CE/EE on-premises. GitLab CE is MIT licensed so what you do with it is your responsibility.

I missed that when reviewing, I assumed WhatsSpy was hosted on GitLab.com. Thanks for enlightening me.