Privacy Policy
Last updated: December 2024
1. Information We Collect
Account Information
When you sign in using OAuth providers (GitHub or Google), we receive and store:
- Your name (as provided by the OAuth provider)
- Email address
- Profile picture URL
- OAuth provider account ID
We do not receive or store your passwords. Authentication is handled entirely by your OAuth provider.
Usage Data
We collect anonymized engagement data to understand how the Service is used:
- Plugin views and interactions
- Search queries (anonymized)
- Installation button clicks
Technical Data
For security and analytics, we collect:
- IP address hash (one-way hashed, cannot be reversed to identify you)
- User agent hash (browser type, anonymized)
- Timestamps of interactions
We hash IP addresses and user agents to prevent individual identification while still being able to detect abuse patterns.
2. How We Use Information
We use collected information to:
- Authenticate users and maintain sessions
- Display personalized content (such as admin features for authorized users)
- Improve the Service based on usage patterns
- Detect and prevent abuse, spam, and security threats
- Generate aggregate, anonymized statistics
3. Data Retention
- Account data: Retained while your account is active, deleted upon account deletion request
- Session data: Sessions expire after 7 days of inactivity
- Engagement data: Retained indefinitely in anonymized form for analytics
4. Third-Party Services
We use the following third-party services:
- GitHub OAuth: For user authentication
- Google OAuth: For user authentication (optional)
- Vercel: Hosting and infrastructure
- Neon: Database hosting
Each third-party service has its own privacy policy governing their data practices.
5. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the following rights under GDPR:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your personal data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing of your personal data
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, you can sign out of your account and your session data will be cleared. For account deletion or data export requests, please open an issue on our GitHub repository.
6. Cookies
We use only essential cookies required for the Service to function:
- Session cookies: To maintain your authentication state
- Theme preference: To remember your dark/light mode preference
We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
7. Children's Privacy
The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete such information.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. Our hosting providers maintain appropriate safeguards to protect your data in accordance with applicable data protection laws.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting to this page. We encourage you to review this page periodically for any changes.